Why github.com/greatfire serves me JavaScript instead of an HTML page?

Hi all.

I find this suspicious:

For indexing, this is the whole HTTP response body served from (TLS validated) https://github.com/greatfire URL:

$.ajax = function(){ return {} };
setTimeout(function(){alert("WARNING: malicious javascript detected on this domain")}, 1);

It only shows up once in a while, most of the time serving a proper org page.

Any explanation for this?

Please point me to the right contacts if this is not the place to ask. 

This is probably the kind of thing best reported to private support at https://github.com/contact so they can get more diagnostic information from you about your configuration and any other information that might be helpful in tracking this down. Since you’re here though :grinning:

  • How often is “once in a while”? 20% of the time? 10%? 5%? 1%?
  • What browser and version are you running?
  • What OS and version are you using?

I just tried it twenty times and couldn’t reproduce what you saw even once using Firefox v61.0.1 on macOS 10.13.6.