Security Scan Report: github.lei-uncle.workers.dev

Redirected to:
https://github.lei-uncle.workers.dev/features/copilot/copilot-business
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 2 countries across 12 domains to perform 181 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: http://github.lei-uncle.workers.dev/features/copilot/copilot-business

Effective URL:
https://github.lei-uncle.workers.dev/features/copilot/copilot-business
Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

Clone of GitHub's Copilot Business page served on a workers.dev subdomain, presenting itself as GitHub. No forms, malware, or Indicators of Compromise, so brand impersonation without credential capture — moderate risk; do not enter data or log in here.

Risk Factors (4)
Impersonation of another entity's brand (GitHub) on a domain not owned by GitHub
Content copied from GitHub's official Copilot Business page, including meta tags and FAQ text
Hosted on a free shared hosting subdomain (workers.dev) — content can be published instantly and is not attributable to the apex domain
Domain unranked / no reputation in Cisco Umbrella
Safety Factors (5)
No credential, login, password, or payment forms present
No credential exfiltration or cross-origin form submissions detected
No Indicators of Compromise, no JavaScript YARA malware patterns, no known malicious kit
No obfuscated or malicious JavaScript behavior detected
IDS alerts are informational (workers.dev DNS/TLS observation) only, not phishing or malware alerts
Domain age information unavailable

Details

Page Title

GitHub Copilot Business · GitHub

Scan Type

public

Domain Name Analysis

The domain name 'github.lei-uncle.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'github.lei-uncle'. The registrable portion 'workers' spans 7 characters with two vowels and 5 consonants. Segmentation suggests 1 word: workers. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://github.lei-uncle.workers.dev/features/copilot/copilot-business

Page Load Overview

8.90s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,867 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
64%
corporate business
39%
documentation technical
39%
forum community discussion
28%

Detected Features

OG: object

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27104.21.30.239Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7185.199.108.215Fastly · CDNUnited States
AS54113Fastly, Inc.
7142.251.20.93Google · CDNUnited States
AS15169Google LLC
7140.82.112.21United States
AS36459GitHub, Inc.
7172.67.174.48Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7185.199.110.215Fastly · CDNUnited States
AS54113Fastly, Inc.
7185.199.109.215Fastly · CDNUnited States
AS54113Fastly, Inc.
7185.199.111.215Fastly · CDNUnited States
AS54113Fastly, Inc.
7192.178.183.93Google · CDNUnited States
AS15169Google LLC
7142.251.20.91Google · CDNUnited States
AS15169Google LLC
18123--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19B94E9EAB0F1D379058E57ABF0F25A50D2E3199BC757ADD6C01DCB84848188CF6A31A7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:6dv/z6AT+8DMN3NpXoghdTQGtr+NN2HEoN/myw3cbrOSKMC5qLTO6MxSF2XQFrPA:uv/RaOBlCe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:412600:WQ4JE1AoDqFCoABNSIgECYOhznCx00YWSgqAIReUCUgcKMBrEAAEEQACJnAGtyDKAskBAAAOEaaYu7aq0BwQhVAAmpAUCT4C

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000018003c7e7e7e
Perceptual Hash:c639c693647996c9
Difference Hash:43b17101ccece8ec
Wavelet Hash:81001800ffff7e7e
Color Hash:#d2a979

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data