{
  "target": {
    "url": "https://github.com",
    "hostname": "github.com",
    "status_code": 200
  },
  "technologies": {
    "total_detected": 5,
    "items": [
      {
        "name": "Shopify",
        "category": "E-Commerce",
        "confidence": 0.98,
        "evidence": "header: server=cloudflare"
      },
      {
        "name": "Tailwind CSS",
        "category": "CSS Framework",
        "confidence": 0.85,
        "evidence": "html_pattern: class=[\"'][^\"']*\\b(flex|grid|hidden|px-\\d|py-\\d|bg-[a-z]+-\\d+|text-[a-z]+-\\d+|rounded-(md|lg|full))\\b[^\"']*"
      },
      {
        "name": "Bootstrap",
        "category": "CSS Framework",
        "confidence": 0.9,
        "evidence": "html_pattern: class=[\"'][^\"']*\\b(container(-fluid)?|row|col-(xs|sm|md|lg|xl)-\\d+|btn btn-[a-z]+)\\b[^\"']*"
      },
      {
        "name": "Google Analytics",
        "category": "Analytics",
        "confidence": 0.95,
        "evidence": "html_pattern: G-[A-Z0-9]+"
      },
      {
        "name": "Cloudflare",
        "category": "CDN & Security",
        "confidence": 0.99,
        "evidence": "header: cf-ray=a36583cb1cee5aae-CMH"
      }
    ]
  },
  "security_posture": {
    "score": 90,
    "grade": "A",
    "audit": [
      {
        "header": "Strict-Transport-Security",
        "status": "PASS",
        "value": "max-age=31536000; includeSubdomains; preload",
        "weight": 25
      },
      {
        "header": "Content-Security-Policy",
        "status": "PASS",
        "value": "default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com github.githubassets.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net productionresultssa4.blob.core.windows.net productionresultssa5.blob.core.windows.net productionresultssa6.blob.core.windows.net productionresultssa7.blob.core.windows.net productionresultssa8.blob.core.windows.net productionresultssa9.blob.core.windows.net productionresultssa10.blob.core.windows.net productionresultssa11.blob.core.windows.net productionresultssa12.blob.core.windows.net productionresultssa13.blob.core.windows.net productionresultssa14.blob.core.windows.net productionresultssa15.blob.core.windows.net productionresultssa16.blob.core.windows.net productionresultssa17.blob.core.windows.net productionresultssa18.blob.core.windows.net productionresultssa19.blob.core.windows.net github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com wss://alive-staging.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com wss://production-copilot-host.webpubsub.azure.com edge.fullstory.com rs.fullstory.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com www.youtube-nocookie.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com user-images.githubusercontent.com private-user-images.githubusercontent.com opengraph.githubassets.com repository-images.githubusercontent.com marketplace-screenshots.githubusercontent.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com explore-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com images.ctfassets.net/8aevphvgewt8/; manifest-src 'self'; media-src github.com user-images.githubusercontent.com secured-user-images.githubusercontent.com private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com assets.ctfassets.net/8aevphvgewt8/ videos.ctfassets.net/8aevphvgewt8/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/",
        "weight": 25
      },
      {
        "header": "X-Frame-Options",
        "status": "PASS",
        "value": "deny",
        "weight": 15
      },
      {
        "header": "X-Content-Type-Options",
        "status": "PASS",
        "value": "nosniff",
        "weight": 15
      },
      {
        "header": "Referrer-Policy",
        "status": "PASS",
        "value": "origin-when-cross-origin, strict-origin-when-cross-origin",
        "weight": 10
      },
      {
        "header": "Permissions-Policy",
        "status": "MISSING",
        "recommendation": "Explicitly disable unused permissions like camera=(), microphone=().",
        "weight": 10
      }
    ],
    "missing_headers": [
      "Permissions-Policy"
    ],
    "recommendation_summary": "1 recommended security headers missing.",
    "remediation_snippets": {
      "nginx": "# Nginx Configuration Snippet (Add inside server { ... } block)\nadd_header Permissions-Policy \"camera=(), microphone=(), geolocation=()\" always;",
      "vercel_json": "// vercel.json configuration\n{\n  \"headers\": [\n    {\n      \"source\": \"/(.*)\",\n      \"headers\": [\n          {\n                \"key\": \"Permissions-Policy\",\n                \"value\": \"camera=(), microphone=(), geolocation=()\"\n          }\n    ]\n    }\n  ]\n}",
      "missing_count": 1
    }
  },
  "domain_intelligence": {
    "email_provider": "Microsoft 365",
    "mx_records": [
      "github-com.mail.protection.outlook.com"
    ],
    "spf_configured": true,
    "dmarc_configured": true,
    "nameserver_provider": "AWS Route53",
    "nameservers": [
      "dns1.p08.nsone.net",
      "dns2.p08.nsone.net",
      "dns3.p08.nsone.net",
      "dns4.p08.nsone.net",
      "ns-1283.awsdns-32.org",
      "ns-1707.awsdns-21.co.uk",
      "ns-421.awsdns-52.com",
      "ns-520.awsdns-01.net"
    ]
  },
  "page_metadata": {
    "title": "GitHub · Change is constant. GitHub keeps you ahead. · GitHub",
    "description": "Join the world's most widely adopted, AI-powered developer platform where millions of developers, businesses, and the largest open source community build software that advances humanity.",
    "generator": null,
    "canonical": "https://github.com"
  },
  "lead_intelligence": {
    "email_infrastructure": "Microsoft 365",
    "dns_provider": "AWS Route53",
    "email_security": {
      "spf_valid": true,
      "dmarc_valid": true
    },
    "primary_framework": "Tailwind CSS",
    "cms": "Shopify"
  },
  "scan_meta": {
    "api_version": "1.1.0",
    "serverless_runtime": "cloudflare_workers",
    "timestamp": "2026-09-05T13:17:33.406Z"
  }
}