Scan report · 3 months agoPublic

github.com

4.225.11.194AS8075 · US

Submittedhttps://github.com

Landed onhttps://github.com/

Verdict

0 of 9 enginesCleanAutomated

Own this site?

Looks safe

Automated

Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first

InfoCross-domain scripts injected at runtime

28 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

File

Stored by the engine

What you download may be live malware. Open it only in an isolated environment, and do not double-click it.

The ZIP is encrypted. Password:infected

Inside the ZIP the file carries a name the engine generated, not the one the page used.

Downloaded fileCleanThe engine stored it under a generated name

SHA-25617af7dc81a503b5f7d5289276e17e20bcf7a4ae71a2b9eba0ed1446304f8ef20

Infrastructure

IP: 4.225.11.194MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US · AS8075US
TLS: CN=Sectigo Public Server Authentication CA DV E36, O=Sectigo Limited, C=GB · expires Sep 30, 2026
Redirects: 0 hops · / → /

WHOIS

Registrar: MarkMonitor Inc.
Created: Oct 9, 2007
Expires: Oct 9, 2026
Nameservers: dns1.p08.nsone.netdns2.p08.nsone.netdns3.p08.nsone.netdns4.p08.nsone.netns-1283.awsdns-32.orgns-1707.awsdns-21.co.ukns-421.awsdns-52.comns-520.awsdns-01.net

1 suspicious

Hashes & fingerprints

Page Hashd9dab0359fe99d4d6ea5db2dcfc0f380d140e12b36564e58bcacd9e8faf442ed Favicon Hash6a9577cd4f7fa6b75bde1025af85b944e9dd1388373b55ccba6e9f80ac2eae60 DOM Hashe3f43d40b7d0b05060f771912fc6f7ccffb8c2ae8a5dfdb479d40f5077afdbfb Screenshot pHashfb3324ccf9337c00 JARM27d27d27d00027d00041d41d000000aa5feb68b57d31b6dc713b6917a988e3 JA4Xa373a9f83c6b_7022c563de38_a7d8059b5276 Cert ThumbprintA5471F8766FEAFB2EE469970AEDA6C614D14B21B Cert IssuerCN=Sectigo Public Server Authentication CA DV E36, O=Sectigo Limited, C=GB

Page capture

Live

Title “GitHub · Change is constant. GitHub keeps you ahead. · GitHub”

Visit Site

Engines

9 · time to verdict