888AI Trusted Reviews · Public OSINT security valuation
thegithubshop.com
Public OSINT valuation for thegithubshop.com: grade B (71/100). Title signal “GitHub Shop”. 4 security headers present, 4 commonly expected headers missing. This is a defensive surface review — not a penetration test.
71
B
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (thegithubshop.com).
- Final HTTP status 200 at https://thegithubshop.com/.
Checks
DNS
resolved- A
- 23.227.38.65
- AAAA
- 2620:127:f00f:5::
- PTR
- myshopify.com
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- Google Trust Services
- notAfter
- Jan 9 06:43:02 2027 GMT
- SAN sample
- thegithubshop.com
- error
- —
HTTP & security headers
4 present- finalUrl
- https://thegithubshop.com/
- status
- 200
- server
- cloudflare
- x-powered-by
- —
- present
- content-security-policy, strict-transport-security, x-content-type-options, x-frame-options
- missing
- referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- GitHub Shop
- generator
- —
- tech
- Shopify, Google Analytics
- script hosts
- analytics.githubassets.com, x, cdn.cookielaw.org, cdn.shopify.com, thegithubshop.com, limits.minmaxify.com, static.klaviyo.com
- description
- GitHub's collection of high-quality, sustainable gifts for developers and those who love to build.
RDAP / registration
rdap- domain
- thegithubshop.com
- registrar
- MarkMonitor Inc.
- created
- 2021-04-27T21:42:03Z
- expires
- 2027-04-27T21:42:03Z
- nameservers
- dns1.p09.nsone.net, dns2.p09.nsone.net, dns3.p09.nsone.net, dns4.p09.nsone.net
- status
- client delete prohibited, client transfer prohibited, client update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 404
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404
Reviews from Trustpilot
Official Trustpilot profile for this domain (public page — we do not scrape Trustpilot).
Open Trustpilot for thegithubshop.comScores/widgets require SECSCAN_TRUSTPILOT_API_KEY on scan.888ai.org · inventKeys=false
888AI Trusted Reviews are brought to You by DOT Synergy llc, the worlds leader in Trusted Reviews.