*.github.net run services for our internal production network. Many of these services are not accessible from outside our internal network.
ssrf-target.iad.github.net to test out SSRF attacks.
Not all subdomains are in-scope for rewards at this time and are therefore ineligible for rewards. A list of out-of-scope subdomains is available in our scope section.