WebVetted ™ Beta
+ New Report

Domain Due Diligence
Report for Github.com

Report Date January 22, 2026
Recommendation
Proceed
Overall Summary
Safe
Why we think so

GitHub.com is a globally popular developer platform owned by Microsoft, ranking #65 in global traffic with approximately 504 million monthly visits. It serves millions of developers and businesses worldwide, primarily from the United States. The site leverages reliable infrastructure from Amazon and Microsoft and employs many well-known services and security measures. It is an active registered domain with multiple valid USPTO trademarks related to software and developer services. User reports note some issues with aggressive spam detection and slow support responses, but these concerns relate mostly to platform user management rather than site legitimacy. GitHub is not itself a scam; however, scammers frequently misuse its features for phishing and fraud. Users should remain cautious and follow security best practices when interacting with GitHub-related communications.

Confidence Score
90%

Risk Insights

✅

Reputable Domain and Traffic

Domain active since 2007 via trusted registrar
Ranks #65 globally with 500M+ monthly visits
Strong direct and search traffic sources
🛡️

Multiple Trademark Protections

Several live USPTO trademarks for 'GitHub'
Legal ownership verified with official registries
Covers software, services, and merchandise categories
⚠️

Platform Likely Safe but Beware of Scam Abuse

GitHub platform is legitimate and trusted
Scammers commonly misuse GitHub features for phishing
Practice caution with unexpected emails or OAuth requests

Contradictory Signals

The site itself is safe, but users face external risks from scams using GitHub tools.

Signal A: Domain is highly credible with strong technical and legal validation

Signal B: User reports frequent phishing scams exploiting GitHub's notification systems

Category Scores

Identity 92/100
Reputation 88/100
Technical 90/100
Content 85/100
Legal 90/100
Business Validity 90/100

Red Flags & Warnings

  • Users report aggressive spam detection blocking legitimate users and slow response times from GitHub support.
  • Scammers exploit GitHub's notification and mention systems to send phishing emails and host scam content on GitHub Pages.

🔎 Detailed Checks & Analysis

Domain Age and Registrar Verification

Score: 92/100
Passed

"A long-established domain reduces risk and registrar is credible."

Reason: Registered since 2007 with a reputable registrar MarkMonitor, Inc.

Traffic and Popularity Metrics

Score: 95/100
Passed

"High traffic and strong direct usage indicate trust and authentic user base."

Reason: Ranked #65 globally with over 500M monthly visits, mainly direct and search traffic.

Technical Infrastructure

Score: 90/100
Passed

"Technologies used are industry standard and indicate a well-maintained site."

Reason: Uses reputable infrastructure including Amazon AWS and Microsoft Azure for hosting and CDN.

Legal and Trademark Status

Score: 88/100
Passed

"Trademarks confirm official brand presence and legal protections."

Reason: Multiple valid USPTO trademark registrations for GitHub related to software and services.

Blacklist and Scam Checks

Score: 90/100
Passed

"No detected phishing or malware threats directly associated with github.com domain."

Reason: No listings on crypto scam blacklists or Google Safe Browsing blacklists.

User Reports and Reputation

Score: 75/100
Passed

"Known issues are mostly platform management, not site authenticity."

Reason: User complaints relate to support and spam detection but not scam or fraud by site itself.

Official Business Presence

Score: 80/100
Passed

"Presence beyond web domain adds credibility."

Reason: Physical office listing in Japan with positive reviews confirms real-world business operation.

Your Next Steps

  • 1
    Always verify the authenticity of GitHub emails by logging in directly at github.com rather than clicking email links.
  • 2
    Review authorized OAuth applications regularly to prevent unauthorized access to your GitHub account.
  • 3
    Report any suspicious user behavior or phishing attempts using GitHub's official abuse reporting tools.
  • 4
    Consider setting up secondary or alias emails to isolate risks from phishing or spam.

Evidence & Citations

🕵🏻 Keep investigating

Recommended →
🌐 Vet another Website

Run another instant due diligence scan on any domain. Verify before you subscribe or shop!

How WebVetted investigates fraud

Understand our methodology, founder background, and why people trust us.

Read playbook →
Scam Encyclopedia

Browse platform-specific scams / red flags and see real-world encounters curated by our analysts.

Read playbook →