Spotlight

GitHub, under continuous watch.

If GitHub's nameservers moved tonight, every CI pipeline on earth would follow the new records without asking. DomainDrift reads this estate about every 5 minutes and signs each reading - here is the live record.

The briefing2026-09-03

The estate held steady with no material changes recorded. GitHub runs on Cloudflare with Microsoft 365 mail. Its registration expires in 36 days. GitHub Pages hosts github.io and githubstatus.com. Both sites answer web requests. Their registrations expire in 186 and 218 days. Cloudflare also hosts githubassets.com and githubusercontent.com. These domains do not answer web requests. No mail servers are published for any of these names. The window remains quiet across all five domains. Signatures cover DNS, mail, certificates, and registration data. The estate held steady with no material changes recorded.

The estate

github.comUp right now

The front door. Web, API, and git-over-HTTPS.

Runs onCloudflare

Email byMicrosoft 365

Also usesAWS Route 53DocuSignFacebook/MetaKrispOpenAISendGrid

Registration 36dRead 14:16 UTCSigned record →

githubusercontent.comNo web page - DNS only

Raw file delivery. Every raw fetch rides its DNS.

Runs onCloudflare

Also usesAWS Route 53GlobalSignCloudflare (proxied)

Registration 521dRead 14:21 UTCSigned record →

github.ioUp right now

GitHub Pages. Millions of project sites.

Runs onGitHub Pages

Also usesAWS Route 53CloudflareCloudflare (proxied)

Registration 186dRead 14:21 UTCSigned record →

githubassets.comNo web page - DNS only

Static assets for github.com itself.

Runs onCloudflare

Also usesAWS Route 53Cloudflare (proxied)

Registration 50dRead 14:11 UTCSigned record →

githubstatus.comUp right now

The status page people check when the rest misbehaves.

Runs onGitHub Pages

Also usesAWS Route 53Google Search ConsoleAtlassianAtlassian StatuspageCloudflareCloudflare (proxied)

Registration 218dRead 14:19 UTCSigned record →

Recent movement

No material movement in the last 24 hours. A quiet window is a reading too: the watch ran, the records held.

Get the alert the day this estate moves Nameserver, mail, registrar, or CA change - in your inbox or webhook within minutes, signed reading attached. Alert subscriptions ride the paid rungs - see the plans.

Set up the watch →

Your job here Security: the hijack window → Vendor risk: evidence → Infrastructure: know first →