WebVetted
+ New  
Site icon
domain

Investigation & Evidence Report

Generated on Jan 22, 2026

Preview

github.com

http://github.com
Geo: unknown
Website: Site icon
Category: Domain
Recommendation
Proceed
Overall Summary
Safe
  Why we think so? 

GitHub.com is a globally popular developer platform owned by Microsoft, ranking #65 in global traffic with approximately 504 million monthly visits. It serves millions of developers and businesses worldwide, primarily from the United States. The site leverages reliable infrastructure from Amazon and Microsoft and employs many well-known services and security measures. It is an active registered domain with multiple valid USPTO trademarks related to software and developer services. User reports note some issues with aggressive spam detection and slow support responses, but these concerns relate mostly to platform user management rather than site legitimacy. GitHub is not itself a scam; however, scammers frequently misuse its features for phishing and fraud. Users should remain cautious and follow security best practices when interacting with GitHub-related communications.

Confidence Score Our overall confidence rating for this entity based on public signals, activity, and risk checks.
90%

Risk Insights

✅

Reputable Domain and Traffic

  • Domain active since 2007 via trusted registrar
  • Ranks #65 globally with 500M+ monthly visits
  • Strong direct and search traffic sources
🛡️

Multiple Trademark Protections

  • Several live USPTO trademarks for 'GitHub'
  • Legal ownership verified with official registries
  • Covers software, services, and merchandise categories
⚠️

Platform Likely Safe but Beware of Scam Abuse

  • GitHub platform is legitimate and trusted
  • Scammers commonly misuse GitHub features for phishing
  • Practice caution with unexpected emails or OAuth requests

Category Scores

Red Flags & Warnings

  • Users report aggressive spam detection blocking legitimate users and slow response times from GitHub support.
  • Scammers exploit GitHub's notification and mention systems to send phishing emails and host scam content on GitHub Pages.

Detailed Checks & Insights

0-100 Scale

Domain Age and Registrar Verification

Score: 92
Passed

"A long-established domain reduces risk and registrar is credible."

Reason: Registered since 2007 with a reputable registrar MarkMonitor, Inc.

Traffic and Popularity Metrics

Score: 95
Passed

"High traffic and strong direct usage indicate trust and authentic user base."

Reason: Ranked #65 globally with over 500M monthly visits, mainly direct and search traffic.

Technical Infrastructure

Score: 90
Passed

"Technologies used are industry standard and indicate a well-maintained site."

Reason: Uses reputable infrastructure including Amazon AWS and Microsoft Azure for hosting and CDN.

Legal and Trademark Status

Score: 88
Passed

"Trademarks confirm official brand presence and legal protections."

Reason: Multiple valid USPTO trademark registrations for GitHub related to software and services.

Blacklist and Scam Checks

Score: 90
Passed

"No detected phishing or malware threats directly associated with github.com domain."

Reason: No listings on crypto scam blacklists or Google Safe Browsing blacklists.

User Reports and Reputation

Score: 75
Passed

"Known issues are mostly platform management, not site authenticity."

Reason: User complaints relate to support and spam detection but not scam or fraud by site itself.

Official Business Presence

Score: 80
Passed

"Presence beyond web domain adds credibility."

Reason: Physical office listing in Japan with positive reviews confirms real-world business operation.

Your Next Steps

  • 1

    Always verify the authenticity of GitHub emails by logging in directly at github.com rather than clicking email links.

  • 2

    Review authorized OAuth applications regularly to prevent unauthorized access to your GitHub account.

  • 3

    Report any suspicious user behavior or phishing attempts using GitHub's official abuse reporting tools.

  • 4

    Consider setting up secondary or alias emails to isolate risks from phishing or spam.

Key Evidence & Citations

📌 More checks:

🕵🏻 Keep vetting

🌐 Vet another Website »

Run another instant due diligence scan on any domain. Verify before you subscribe or shop!

 Spot fake SaaS login pages before handing over credentials »

Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...

 Review emergency disaster charity sites »

Right after storms or earthquakes, scammers stand up donation pages that copy legitimate NGOs and push crypto wallets. S...

Community feedback

Not rated yet

0 reviews published

5 stars 0%
4 stars 0%
3 stars 0%
2 stars 0%
1 star 0%

Leave a review

Reviews

No public reviews yet. Be the first to share your experience.

Analyst Briefing

Get answers grounded in the sourced data. Citations like will link to the evidence locker.

Evidence Locker
// Waiting for data ingestion...

Evidence Locked

This raw JSON payload contains sensitive intelligence data available to Members only.

Unlock
1.9K data points collected