github.com

DNS sikkerhedsrapport

24 bestået
3 advarsler
0 fejlet
A
93/100
Fremragende konfiguration med minimale forbedringer mulige.
Scannet 05. Jan 2026 kl. 01:34

Website preview

Domæneoplysninger

Alder

18 år, 4 måneder

Etableret

Udløber om

225 dage

09. Oct 2026

DNSSEC

Inaktiv

Navneservere

8

servere

Registrar MarkMonitor Inc.
Oprettet 09. Oct 2007
Sidst opdateret 05. Jan 2026
Status Aktiv

Navneservere

DNS1.P08.NSONE.NET DNS2.P08.NSONE.NET DNS3.P08.NSONE.NET DNS4.P08.NSONE.NET NS-1283.AWSDNS-32.ORG NS-1707.AWSDNS-21.CO.UK NS-421.AWSDNS-52.COM NS-520.AWSDNS-01.NET

Domænestatus (EPP)

client delete prohibited client transfer prohibited client update prohibited

Domæne metrics

PageRank

8.6

ud af 10

Archive.org

50,000+

snapshots Se historik →

Metrics hentet for 1 måned siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

8 3

SPF bruger soft fail (~all) - overvej at bruge -all

Medium

SPF nærmer sig 10 DNS lookup grænsen (8/10)

Medium

DNSSEC er ikke aktiveret

Aktiver DNSSEC for at beskytte mod DNS spoofing

Medium

CAA iodef (reporting) er ikke konfigureret

MTA-STS ikke konfigureret

MTA-STS sikrer krypteret email-transport. Relevant for NIS2 compliance.

SPF record fundet

v=spf1 ip4:192.30.252.0/22 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com include:spf.protection.outlook.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ip4:167.89.101.2 ip4:167.89.101.192/28 ip4:192.254.112.60 ip4:192.254.112.98/31 ip4:192.254.113.10 ip4:192.254.113.101 ip4:192.254.114.176 ~all

DMARC record fundet

v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@github.com

DMARC policy er sat til reject (streng)

DMARC aggregate reporting er aktiveret

DKIM record fundet

CAA records fundet

[ { "tag": "issuewild", "ttl": 3600, "flags": 0, "value": "digicert.com" }, { "tag": "issuewild", "ttl": 3600, "flags": 0, "value": "sectigo.com" }, { "tag": "issue", "ttl": 3600, "flags": 0, "value": "digicert.com" }, { "tag": "issue", "ttl": 3600, "flags": 0, "value": "globalsign.com" }, { "tag": "issue", "ttl": 3600, "flags": 0, "value": "sectigo.com" } ]

Zone transfer (AXFR) er korrekt blokeret

Security.txt fil fundet (RFC 9116)

Contact: https://hackerone.com/github Expires: 2026-02-04T00:34:06z Policy: https://bounty.github.com

SSL / HTTPS

5

HTTPS er aktiveret

HTTP redirecter til HTTPS

HSTS er aktiveret

SSL-certifikat er gyldigt

SSL-certifikat er gyldigt i 31 dage

DNS Records

6

Ingen IPv6 (AAAA) records

8 nameserver(s) fundet

Multiple nameservers for redundans

5 MX record(s) fundet

[ { "ttl": 2521, "host": "aspmx.l.google.com", "priority": 1 }, { "ttl": 2521, "host": "alt1.aspmx.l.google.com", "priority": 5 }, { "ttl": 2521, "host": "alt2.aspmx.l.google.com", "priority": 5 }, { "ttl": 2521, "host": "alt4.aspmx.l.google.com", "priority": 10 }, { "ttl": 2521, "host": "alt3.aspmx.l.google.com", "priority": 10 } ]

Ingen wildcard DNS konfiguration

1 A record(s) fundet

[ { "ip": "140.82.121.4", "ttl": 25 } ]

SOA record fundet

{ "mname": "dns1.p08.nsone.net", "retry": 7200, "rname": "hostmaster.nsone.net", "expire": 1209600, "serial": 1656468023, "refresh": 43200, "minimum_ttl": 3600 }

HTTP Headers

5

Permissions-Policy header mangler

X-Frame-Options: deny

Strict-Transport-Security: preload, includeSubDomains, max-age=31,536,000

X-Content-Type-Options: nosniff

Content-Security-Policy er konfigureret

Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "140.82.121.4",
                "ttl": 25
            }
        ],
        "mx": [
            {
                "ttl": 2521,
                "host": "aspmx.l.google.com",
                "priority": 1
            },
            {
                "ttl": 2521,
                "host": "alt1.aspmx.l.google.com",
                "priority": 5
            },
            {
                "ttl": 2521,
                "host": "alt2.aspmx.l.google.com",
                "priority": 5
            },
            {
                "ttl": 2521,
                "host": "alt4.aspmx.l.google.com",
                "priority": 10
            },
            {
                "ttl": 2521,
                "host": "alt3.aspmx.l.google.com",
                "priority": 10
            }
        ],
        "ns": [
            {
                "ttl": 1837,
                "host": "ns-1707.awsdns-21.co.uk"
            },
            {
                "ttl": 1837,
                "host": "dns4.p08.nsone.net"
            },
            {
                "ttl": 1837,
                "host": "dns3.p08.nsone.net"
            },
            {
                "ttl": 1837,
                "host": "ns-1283.awsdns-32.org"
            },
            {
                "ttl": 1837,
                "host": "dns1.p08.nsone.net"
            },
            {
                "ttl": 1837,
                "host": "ns-421.awsdns-52.com"
            },
            {
                "ttl": 1837,
                "host": "ns-520.awsdns-01.net"
            },
            {
                "ttl": 1837,
                "host": "dns2.p08.nsone.net"
            }
        ],
        "caa": [
            {
                "tag": "issuewild",
                "ttl": 3600,
                "flags": 0,
                "value": "digicert.com"
            },
            {
                "tag": "issuewild",
                "ttl": 3600,
                "flags": 0,
                "value": "sectigo.com"
            },
            {
                "tag": "issue",
                "ttl": 3600,
                "flags": 0,
                "value": "digicert.com"
            },
            {
                "tag": "issue",
                "ttl": 3600,
                "flags": 0,
                "value": "globalsign.com"
            },
            {
                "tag": "issue",
                "ttl": 3600,
                "flags": 0,
                "value": "sectigo.com"
            }
        ],
        "soa": [
            {
                "mname": "dns1.p08.nsone.net",
                "retry": 7200,
                "rname": "hostmaster.nsone.net",
                "expire": 1209600,
                "serial": 1656468023,
                "refresh": 43200,
                "minimum_ttl": 3600
            }
        ],
        "txt": [
            {
                "ttl": null,
                "txt": "loom-site-verification=f3787154f1154b7880e720a511ea664d"
            },
            {
                "ttl": null,
                "txt": "google-site-verification=UTM-3akMgubp6tQtgEuAkYNYLyYAvpTnnSrDMWoDR3o"
            },
            {
                "ttl": null,
                "txt": "atlassian-domain-verification=jjgw98AKv2aeoYFxiL\/VFaoyPkn3undEssTRuMg6C\/3Fp\/iqhkV4HVV7WjYlVeF8"
            },
            {
                "ttl": null,
                "txt": "adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b"
            },
            {
                "ttl": null,
                "txt": "MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805"
            },
            {
                "ttl": null,
                "txt": "shopify-verification-code=t1YPwcmvnxZyBycaCpk1MPyWoFs72o"
            },
            {
                "ttl": null,
                "txt": "MS=ms44452932"
            },
            {
                "ttl": null,
                "txt": "stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f"
            },
            {
                "ttl": null,
                "txt": "TAILSCALE-xOzoDvFUzZr5YYVCQFuD"
            },
            {
                "ttl": null,
                "txt": "krisp-domain-verification=ZlyiK7XLhnaoUQb2hpak1PLY7dFkl1WE"
            },
            {
                "ttl": null,
                "txt": "v=spf1 ip4:192.30.252.0\/22 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com include:spf.protection.outlook.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ip4:167.89.101.2 ip4:167.89.101.192\/28 ip4:192.254.112.60 ip4:192.254.112.98\/31 ip4:192.254.113.10 ip4:192.254.113.101 ip4:192.254.114.176  ~all"
            },
            {
                "ttl": null,
                "txt": "apple-domain-verification=RyQhdzTl6Z6x8ZP4"
            },
            {
                "ttl": null,
                "txt": "jamf-site-verification=XtaPNIYghF_e_xRDI8CjgQ"
            },
            {
                "ttl": null,
                "txt": "facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50"
            },
            {
                "ttl": null,
                "txt": "miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9"
            },
            {
                "ttl": null,
                "txt": "docusign=087098e3-3d46-47b7-9b4e-8a23028154cd"
            },
            {
                "ttl": null,
                "txt": "google-site-verification=82Le34Flgtd15ojYhHlGF_6g72muSjamlMVThBOJpks"
            },
            {
                "ttl": null,
                "txt": "MS=ms58704441"
            },
            {
                "ttl": null,
                "txt": "calendly-site-verification=at0DQARi7IZvJtXQAWhMqpmIzpvoBNF7aam5VKKxP"
            }
        ],
        "aaaa": [],
        "cname": []
    },
    "ssl": {
        "san": [
            "github.com",
            "www.github.com"
        ],
        "chain": [
            {
                "issuer": "Sectigo ECC Domain Validation Secure Server CA",
                "subject": "github.com",
                "valid_to": "2026-02-05T23:59:59+00:00"
            },
            {
                "issuer": "USERTrust ECC Certification Authority",
                "subject": "Sectigo ECC Domain Validation Secure Server CA",
                "valid_to": "2030-12-31T23:59:59+00:00"
            },
            {
                "issuer": "AAA Certificate Services",
                "subject": "USERTrust ECC Certification Authority",
                "valid_to": "2028-12-31T23:59:59+00:00"
            }
        ],
        "issuer": {
            "country": "GB",
            "common_name": "Sectigo ECC Domain Validation Secure Server CA",
            "organization": "Sectigo Limited"
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "github.com",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2026-02-05T23:59:59+00:00",
        "is_expired": false,
        "valid_from": "2025-02-05T00:00:00+00:00",
        "chain_length": 3,
        "serial_number": "AB6686B5627BE80596821330128649F5",
        "days_remaining": 31,
        "is_self_signed": false,
        "signature_algorithm": "ecdsa-with-SHA256"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": true,
        "hsts_max_age": 31536000,
        "hsts_preload": true,
        "redirects_to_https": true,
        "hsts_include_subdomains": true
    },
    "whois": {
        "dnssec": false,
        "domain": "GITHUB.COM",
        "status": "registered",
        "registrar": "MarkMonitor Inc.",
        "raw_status": [
            "client delete prohibited",
            "client transfer prohibited",
            "client update prohibited"
        ],
        "expiry_date": "2026-10-09T18:20:50+00:00",
        "nameservers": [
            "DNS1.P08.NSONE.NET",
            "DNS2.P08.NSONE.NET",
            "DNS3.P08.NSONE.NET",
            "DNS4.P08.NSONE.NET",
            "NS-1283.AWSDNS-32.ORG",
            "NS-1707.AWSDNS-21.CO.UK",
            "NS-421.AWSDNS-52.COM",
            "NS-520.AWSDNS-01.NET"
        ],
        "created_date": "2007-10-09T18:20:50+00:00",
        "updated_date": "2026-01-05T00:33:49+00:00"
    },
    "metrics": {
        "pagerank": 8.59,
        "fetched_at": "2026-01-05T01:34:16+01:00",
        "wayback_snapshots": 50000
    },
    "internal_checks": {
        "open_resolver": {
            "checked_at": "2026-01-05T01:34:07+01:00",
            "nameserver": "ns-1707.awsdns-21.co.uk",
            "is_open_resolver": false
        }
    }
}