What are the consequences of this? I think they can seize the domain for free if I'm misrepresenting the site as part of github, but lets assume I use no branding, etc what's the worst that can happen?
I don't know, I'm not a lawyer. But if somebody squatted my company's mx domain, I'd be a little concerned just from a phishing perspective alone. GitHub is also a trademark, so...