888AI Trusted Reviews · Public OSINT security valuation
cli.github.com
Public OSINT valuation for cli.github.com: grade D (51/100). Title signal “GitHub CLI | Take GitHub to the command line”. 0 security headers present, 8 commonly expected headers missing. This is a defensive surface review — not a penetration test.
51
D
Findings
- TLS handshake OK (TLSv1.3).
- HSTS header missing on the final HTTPS response.
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (github.com).
- Final HTTP status 200 at https://cli.github.com/.
Checks
DNS
resolved- A
- 185.199.110.153, 185.199.108.153, 185.199.109.153, 185.199.111.153
- AAAA
- 2606:50c0:8000::153, 2606:50c0:8003::153, 2606:50c0:8001::153, 2606:50c0:8002::153
- PTR
- cdn-185-199-110-153.github.com
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_128_GCM_SHA256
- issuer
- Let's Encrypt
- notAfter
- Dec 29 23:44:45 2026 GMT
- SAN sample
- *.github.com, *.github.io, *.githubusercontent.com, github.com, github.io, githubusercontent.com
- error
- —
HTTP & security headers
0 present- finalUrl
- https://cli.github.com/
- status
- 200
- server
- GitHub.com
- x-powered-by
- —
- present
- —
- missing
- strict-transport-security, content-security-policy, x-content-type-options, x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- GitHub CLI | Take GitHub to the command line
- generator
- Jekyll v4.4.1
- tech
- —
- script hosts
- analytics.githubassets.com, x
- description
- Take GitHub to the command line
RDAP / registration
rdap- domain
- github.com
- registrar
- MarkMonitor Inc.
- created
- 2007-10-09T18:20:50Z
- expires
- 2028-10-09T18:20:50Z
- nameservers
- dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, ns-1283.awsdns-32.org, ns-1707.awsdns-21.co.uk, ns-421.awsdns-52.com, ns-520.awsdns-01.net
- status
- client delete prohibited, client transfer prohibited, client update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 404
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404
Reviews from Trustpilot
Official Trustpilot profile for this domain (public page — we do not scrape Trustpilot).
Open Trustpilot for cli.github.comScores/widgets require SECSCAN_TRUSTPILOT_API_KEY on scan.888ai.org · inventKeys=false
888AI Trusted Reviews are brought to You by DOT Synergy llc, the worlds leader in Trusted Reviews.