DNS & Domain Details
Every record, the providers behind them, and who the domain is registered to.
Mail provider
Microsoft 365
DNS host
NS1 (IBM)
Registrar
MarkMonitor Inc.
Expires
2028-10-09
Worth knowing
- DNSSEC is not enabledWithout a signed delegation, resolvers cannot detect forged answers for this domain. Most registrars can enable it in a click, though it does need care during nameserver changes.
- Very low TTL on a A recordA TTL of 43 seconds forces constant re-querying. Fine during a migration, expensive as a permanent setting.
- 24 TXT records at the apexVerification tokens accumulate and are rarely removed. Each one is a small hint about your stack, and a large apex TXT set can push DNS responses over the UDP limit, forcing TCP retries. Worth pruning tokens for services you no longer use.
Looking good
- Transfer lock is setThe domain cannot be transferred away without first unlocking it, which is the basic defence against domain hijacking.
- CAA restricts certificate issuanceOnly these authorities may issue certificates: digicert.com, letsencrypt.org, sectigo.com, globalsign.com.
Email authentication records
These live at underscore-prefixed names, so none of them appear in the record tables below — those query the domain itself.
| Name | Type | Value |
|---|---|---|
| _dmarc.github.com check DMARC | DMARC | v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1 |
| default._bimi.github.com check BIMI | BIMI | not published |
| _mta-sts.github.com check MTA-STS | MTA-STS | not published |
| _smtp._tls.github.com check TLS-RPT | TLS-RPT | not published |
| selector1._domainkey.github.com Microsoft 365 (named in your SPF record) | DKIM 1024-bit | v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxZC/z2cK+2s1f/ktzSDSeFzkfIHrjwtGFsfKMAYvKaXjPVNzKykpbXBkX5nB7dVUTFttda7aROr2iSrIseQ27Ui+4rUZVzgFanE8RaXhYM9n5wPKNv8GtLJk7JgcsYZ7ErgID4uW2sEYyV/dnRYw6rDzOaeRKkKELTUfJI5ebLQIDAQAB; |
| smtpapi._domainkey.github.com SendGrid (named in your SPF record) | DKIM 1024-bit | k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB |
| k1._domainkey.github.com Mailchimp (named in your SPF record) | DKIM 1024-bit | k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB; |
| k2._domainkey.github.com Mailchimp (named in your SPF record) | DKIM 2048-bit | v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB; |
| k3._domainkey.github.com Mailchimp (named in your SPF record) | DKIM 2048-bit | v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYGiMSn7fsUqSvfSX40x9R1OlRtbNiCY80lHRIlcKx3XDIR7257aUx+q9CSIARdfTL6KCuLGNFx5g9TgVr6png4ajcieSQGtOehBgxnkDN8aAA5TX0FmFrcefJU0JoxLOF09EKgXxhSSHCk/ekVb0PXSboHXoZ9+EI404F1qhcwXXIgHXTaUthHTut2P6BBZhIXIgvDe/w49GchR7MRJqjNb7neEBbYHbgWuBTvvHCg7Gy6m6n9krYK+ROWq3dVvXy9plAGK3ygM+HtjIiMt7arRGMOF0WgDTz7YdN9BGpt6BvXxLnjiQcgS5T9n+cIyPZgiWzDMXNlaEEdKTEKxrwIDAQAB; |
| google._domainkey.github.com Google Workspace | DKIM 2048-bit | v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6T5sl/RwdSqGoYWaWaFbS2UAeyPrEmd0gogocmRfS441qwR8/0KB81Hw89P0l4YiFRrXYk7NVIGfyCRHAYYZUzCkGeOysI2EjgzLFhd/NEsbRzOEc/kWkK/RO6JFq/5lOn6M9AZw/ap9tds4JG9ApgNNdSpPxp9DmvpsOSgNMVflRxQFrk3kdS4RNAPKu/OPoA7dlR/A/pECryjRoYgENtDXzdnK70HgCekems6UDzxDj61cjyoKoXtEMF/QsaHEQ1Gjfv014rDJBsubk/kT5VqHkWHa/ia68Z5r228Ety/wFfQNjXTx/J7KGZ9GkZlKED659eiJcLnWcKDSiQlhwIDAQAB |
| cm._domainkey.github.com Campaign Monitor | DKIM 1024-bit | k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDXLybkpDQnCyQYlQc46kL2sPMsYDqwkjPyFRSDiaq6qUeujAlU775+f8rzxIrjHc8sPstAZOuJzqcgDPiidRxdE2Th/lcnfbN4btWvJwHKK6KD/IazNWNqQtunYyPzfmSRTtOE4Nii4Oxwx1glTJAVhCTObD2uh2U44lCG+pgYswIDAQAB |
| mailo._domainkey.github.com generic | DKIM 1024-bit | k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQPJBpMLQPx0UvC5HXIoVHgwfowk1OjOqnQNcVjbcpKTcCeOkXuTdT1U33weODlOlNTB+GIFWRpDGYZDdMvu2ffzpHTNMeRALvMhIrzNLpJbco+InXab5PzFnGdaBNVUKhv7zPlBkYKA3tNKwyRwCH8Wgja3q7Mg8rUIBklICYfQIDAQAB |
8 DKIM keys found by probing
100 selector names.
DKIM has no directory: the selector is chosen by whoever signs the mail and appears only in a
message’s DKIM-Signature header, so no tool can enumerate them. We probe the names real
providers use, and add any suggested by this domain’s own SPF record.
To check a selector you already know,
give it to the DKIM tool directly.
Services verified against this domain
Derived from TXT verification tokens. These are left behind after a one-off domain proof, so the list shows what the domain has been enrolled in — including things that may no longer be in use.
- Adobe
- Apple Business
- Atlassian
- Calendly
- DocuSign
- Google (Workspace or Search Console)
- Jamf
- Loom
- Meta
- Microsoft 365
- Miro
- OpenAI
- Shopify
- Stripe
Registration
| Registrar | MarkMonitor Inc. (IANA 292) |
| Created | 2007-10-09 · 6,912 days ago |
| Expires | 2028-10-09 · in 758 days |
| Last changed | 2026-09-07 |
| DNSSEC | not signed |
| Abuse contact | abusecomplaints@markmonitor.com |
| Status | client delete prohibited, client transfer prohibited, client update prohibited |
From rdap.verisign.com over RDAP.
IPv4 addresses A
| Name | TTL | Value |
|---|---|---|
| github.com | 43s | 140.82.121.4 |
IPv6 addresses AAAA
| Name | TTL | Value |
|---|---|---|
| github.com.com | 5m | 2a06:98c1:3122:8000::2 |
| github.com.com | 5m | 2a06:98c1:3123:8000::2 |
www A / CNAME
| Name | TTL | Value |
|---|---|---|
| github.com | 43s | 140.82.121.4 |
| www.github.com | 1h | github.com |
Mail servers MX
| Name | TTL | Value |
|---|---|---|
| github.com | 5m | 0 github-com.mail.protection.outlook.com |
Nameservers NS
| Name | TTL | Value |
|---|---|---|
| github.com | 15m | dns3.p08.nsone.net |
| github.com | 15m | ns-1707.awsdns-21.co.uk |
| github.com | 15m | ns-421.awsdns-52.com |
| github.com | 15m | ns-520.awsdns-01.net |
| github.com | 15m | ns-1283.awsdns-32.org |
| github.com | 15m | dns2.p08.nsone.net |
| github.com | 15m | dns1.p08.nsone.net |
| github.com | 15m | dns4.p08.nsone.net |
Text records TXT
| Name | TTL | Value |
|---|---|---|
| github.com | 299s | facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50 |
| github.com | 299s | v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all |
| github.com | 299s | anthropic-domain-verification-4az7qn=if8YWuRRqwLycGJDooumzHtxm |
| github.com | 299s | calendly-site-verification=at0DQARi7IZvJtXQAWhMqpmIzpvoBNF7aam5VKKxP |
| github.com | 299s | MS=ms44452932 |
| github.com | 299s | google-site-verification=82Le34Flgtd15ojYhHlGF_6g72muSjamlMVThBOJpks |
| github.com | 299s | openai-domain-verification=dv-3nh33eQwdkotMIAzLrIDVZo1 |
| github.com | 299s | loom-site-verification=f3787154f1154b7880e720a511ea664d |
| github.com | 299s | apple-domain-verification=RyQhdzTl6Z6x8ZP4 |
| github.com | 299s | docusign=087098e3-3d46-47b7-9b4e-8a23028154cd |
| github.com | 299s | shopify-verification-code=t1YPwcmvnxZyBycaCpk1MPyWoFs72o |
| github.com | 299s | google-site-verification=UTM-3akMgubp6tQtgEuAkYNYLyYAvpTnnSrDMWoDR3o |
| github.com | 299s | jamf-site-verification=XtaPNIYghF_e_xRDI8CjgQ |
| github.com | 299s | TAILSCALE-xOzoDvFUzZr5YYVCQFuD |
| github.com | 299s | miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9 |
| github.com | 299s | 00Dd0000000hHE0=1TBKg000000TN2r |
| github.com | 299s | atlassian-domain-verification=jjgw98AKv2aeoYFxiL/VFaoyPkn3undEssTRuMg6C/3Fp/iqhkV4HVV7WjYlVeF8 |
| github.com | 299s | serval-domain-verification-ydryhj=qbkiEakpwEpTvHh5fIiCqtaue |
| github.com | 299s | stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f |
| github.com | 299s | krisp-domain-verification=ZlyiK7XLhnaoUQb2hpak1PLY7dFkl1WE |
| github.com | 299s | cursor-domain-verification-gtfwmt=1rfLOtiTngX5QSxD5HvNKTvm3 |
| github.com | 299s | MS=ms58704441 |
| github.com | 299s | MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805 |
| github.com | 299s | adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b |
Certificate authorities CAA
| Name | TTL | Value |
|---|---|---|
| github.com | 1h | 0 issuewild "digicert.com" |
| github.com | 1h | 0 issue "letsencrypt.org" |
| github.com | 1h | 0 issue "digicert.com" |
| github.com | 1h | 0 issuewild "sectigo.com" |
| github.com | 1h | 0 issuewild "letsencrypt.org" |
| github.com | 1h | 0 issue "sectigo.com" |
| github.com | 1h | 0 issue "globalsign.com" |
Zone authority SOA
| Name | TTL | Value |
|---|---|---|
| github.com | 1h | dns1.p08.nsone.net hostmaster.nsone.net serial=1656468023 refresh=43200 retry=7200 expire=1209600 min=3600 |
Check this domain’s DMARC & SPF or BIMI.