All good hypotheses. > Github has been served with a confidential court order, warrant etc that requires this. I thought of this, but figured since the accoun

All good hypotheses. > Github has been served with a confidential court order, warrant etc that requires this. I thought of this, but figured since the account was essentially bare of public activity it was low probability. > Github has a confidential contract with a large company or government entity and they are requiring this as part of that contract. An interesting idea! > A piece of existing malware in the wild points to this address for a possible command and control server or verification that it's in a VM or whatever, and they want to deal with it, like that guy that registered those nonsense urls. Very possible, although putting 'malware' in your CnC endpoint name might not be the brightest of ideas :)