B
82/100
github.com
Moderate concentration — Single web origin IP.
NS 8
web 1
MX 8
CDN no
DNSSEC no
Network dependency map
each block is one resolved endpoint, coloured by Autonomous SystemDNS
Web
Mail
- AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation×9
- AS62597 NSONE - NSONE Inc×8
- AS16509 AMAZON-02 - Amazon.com, Inc.×8
Findings
3
medium
web
Single web origin IP
The site resolves to exactly one IP with no CDN in front. That host is a hard single point of failure.
1 endpoints
- github.com → 172.182.252.133 · AS8075 Microsoft Azure · GB
Put the origin behind a CDN/anycast layer, or publish multiple origins across networks.
low
web
No CDN in front of the origin
The origin is directly exposed: no anycast absorption, no edge caching, and the origin IP is visible for targeted attack.
Front the site with a CDN (Cloudflare, Fastly, CloudFront, …).
low
dns
DNSSEC not enabled
No DS record at the parent: responses are not cryptographically authenticated and can be forged by an on-path attacker or a poisoned resolver.
Enable DNSSEC signing and publish a DS record at the registrar. (Automate key rollover — misconfigured DNSSEC can itself cause outages.)
DNS records
| Nameservers | dns1.p08.nsone.net dns2.p08.nsone.net dns3.p08.nsone.net dns4.p08.nsone.net ns-1283.awsdns-32.org ns-1707.awsdns-21.co.uk ns-421.awsdns-52.com ns-520.awsdns-01.net |
|---|---|
| A | 172.182.252.133 |
| MX | 0 github-com.mail.protection.outlook.com |
| SOA | ns-1707.awsdns-21.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 |
| CAA | 7 record(s) present |
| DNSSEC | unsigned |
| TXT | 24 record(s) |
Scan history
- B2026-10-03 07:18 UTC
- B2026-10-03 07:18 UTC
- B2026-10-03 07:15 UTC
- B2026-10-03 07:15 UTC
- B2026-09-29 11:43 UTC
- B2026-09-29 10:20 UTC
- B2026-09-22 03:04 UTC
- B2026-09-22 03:04 UTC
Machine-readable: /api/scan?domain=github.com