dns.google

LEGITIMATE Google DNS-over-HTTPS resolver (dns.google/resolve) abused to resolve any host containing "github" and connect to the returned IP directly, bypassing hosts-file/local DNS sinkholes. Legit service, low IOC value.