ScanMalware.com

Security Scan Report: github.xukela.workers.dev

Submitted: Jul 11, 2026, 8:39:46 AMCompleted: Jul 11, 2026, 8:41:03 AMpubliccompleted
Loading additional data...

Summary

This website contacted 11 IPs in 2 countries across 5 domains to perform 156 HTTP transactions. The main domain is github.xukela.workers.dev and was registered NaN years ago.

Submitted URL: https://github.xukela.workers.dev/features/ai

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

The page mimics GitHub branding on an unranked workers.dev subdomain, has many threat‑intel hits, but lacks credential collection; treat as moderate risk.

Risk Factors
Brand impersonation without credential forms
Unknown subdomain creation date
Unranked domain with no reputation
Multiple threat‑intel matches to known GitHub hosts
Safety Factors
No password or payment fields
No JavaScript malware YARA matches
No network IDS alerts
No credential exfiltration detected
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

GitHub AI · AI built into every step of your workflow · GitHub

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(72%)

Domain Information

The domain 'github.xukela.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'github.xukela'. Its registrable label 'workers' stretches across 7 characters split between two vowels and 5 consonants. Tokenizing the label suggests one word: workers. The median word length lands at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://github.xukela.workers.dev/features/ai

Page Load Overview

7.93s
Total Load Time
156
HTTP Requests
5
Domains
3.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:6,767 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software72% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
72%
documentation technical
43%
forum community discussion
43%

Detected Features

Search
OG: object

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16140.82.114.21United States
AS36459GitHub, Inc.
1413.33.187.25Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
14185.199.109.215United States
AS54113Fastly, Inc.
14185.199.108.215United States
AS54113Fastly, Inc.
14185.199.111.215United States
AS54113Fastly, Inc.
1413.33.187.2Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
14140.82.121.6Frankfurt am Main, Hesse, Germany
AS36459GitHub, Inc.
1413.33.187.102Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
14104.21.68.114Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14185.199.110.215United States
AS54113Fastly, Inc.
15611--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T179A42AB660B0E63E015F179AF0F15A00D3E7525BD3964DD8A46DC764C3C788CFAA326A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:ltewhxfprwz/VZIdxqdnLhjUsnVm7MeqWQ8Wz09mo31eJ5PTQYyHxHA7op9hrIQp:l0RW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:461835:IBBgCECACoFP1JRCkAcjAGHl4xsS0sZRNQIE1Djx2gAyKkQDCnsAhQInwiMCkDFSBsGBzIVgFQBgohCAAAAChywBBECNRgwG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f37c3c1800240018
Perceptual Hash:8acca6253d359733
Difference Hash:96f0e1b151e90171
Wavelet Hash:e77f7f19003c003d
Color Hash:#783a4a

Other Hashes

Crop Resistant:96f0e1b151e90171

Scan History

Scan history not available

Unable to load historical scan data