How is github.com?
Looks fine
risk 0/100
Registered 19 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 27 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
27 ms
HTTPS
34 d
left on a Sectigo Limited certificate
Age
19 years
registered 2007-10-09
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records5 record types
| A | 140.82.114.3 |
|---|---|
| MX | 0 github-com.mail.protection.outlook.com |
| NS | dns4.p08.nsone.net ns-520.awsdns-01.net dns3.p08.nsone.net ns-1283.awsdns-32.org dns1.p08.nsone.net dns2.p08.nsone.net ns-421.awsdns-52.com ns-1707.awsdns-21.co.uk |
| TXT | jamf-site-verification=XtaPNIYghF_e_xRDI8CjgQ MS=ms58704441 adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b apple-domain-verification=RyQhdzTl6Z6x8ZP4 cursor-domain-verification-gtfwmt=1rfLOtiTngX5QSxD5HvNKTvm3 miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9 atlassian-domain-verification=jjgw98AKv2aeoYFxiL/VFaoyPkn3undEssTRuMg6C/3Fp/iqhkV4HVV7WjYlVeF8 loom-site-verification=f3787154f1154b7880e720a511ea664d google-site-verification=82Le34Flgtd15ojYhHlGF_6g72muSjamlMVThBOJpks shopify-verification-code=t1YPwcmvnxZyBycaCpk1MPyWoFs72o v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all anthropic-domain-verification-4az7qn=if8YWuRRqwLycGJDooumzHtxm docusign=087098e3-3d46-47b7-9b4e-8a23028154cd facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50 MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805 MS=ms44452932 openai-domain-verification=dv-3nh33eQwdkotMIAzLrIDVZo1 stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f krisp-domain-verification=ZlyiK7XLhnaoUQb2hpak1PLY7dFkl1WE 00Dd0000000hHE0=1TBKg000000TN2r TAILSCALE-xOzoDvFUzZr5YYVCQFuD serval-domain-verification-ydryhj=qbkiEakpwEpTvHh5fIiCqtaue google-site-verification=UTM-3akMgubp6tQtgEuAkYNYLyYAvpTnnSrDMWoDR3o calendly-site-verification=at0DQARi7IZvJtXQAWhMqpmIzpvoBNF7aam5VKKxP |
| CAA | {'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'letsencrypt.org'} {'type': 'CAA', 'issue': 'digicert.com', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'sectigo.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com'} {'type': 'CAA', 'issue': 'sectigo.com', 'critical': 0} {'type': 'CAA', 'issue': 'globalsign.com', 'critical': 0} |
RegistrationMarkMonitor Inc.
| registrar | MarkMonitor Inc. |
|---|---|
| registered | 2007-10-09 |
| expires | 2028-10-09 |
| last changed | 2026-09-07 |
| owner | REDACTED FOR PRIVACY |
| nameservers | dns1.p08.nsone.net dns2.p08.nsone.net dns3.p08.nsone.net dns4.p08.nsone.net ns-1283.awsdns-32.org ns-1707.awsdns-21.co.uk ns-421.awsdns-52.com ns-520.awsdns-01.net |
| status | client delete prohibited client transfer prohibited client update prohibited |
registered 2007-10-09expires 2028-10-09
HTTPS certificate34 days left
| valid | yes |
|---|---|
| issuer | Sectigo Limited |
| covers | github.com, www.github.com |
| protocol | TLSv1.3 |
issued 2026-09-01expires 2026-11-29
DNSSECinsecure
Domain is not signed with DNSSEC
. → com → github.com
Email authenticationexcellent
| SPF | pass v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all |
|---|---|
| DMARC | pass policy quarantine |
| DKIM | found: google, selector1, k1, s1, s2 |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade B · 172/205
Basic Security20/40missing: DNSSEC Enabled
Record Security45/45missing: DKIM Presence
Advanced Security15/25missing: Mail Server Configuration, IPv6 Support
Domain Reputation47/50missing: Typosquatting Check
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop140.82.114.3Barracuda140.82.114.3UCEPROTECT Level 1140.82.114.3
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=github.com" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=github.com"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on github.com.
Reference: /llms.txt.
Watch github.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days