Security Report: githubapi.911alex.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/478cd502-0a03-420d-8041-7d4344929b06 Domain and IP registration (RDAP)/api/v1/rdap/478cd502-0a03-420d-8041-7d4344929b06How often this domain was scanned/api/v1/domain/stats/githubapi.911alex.workers.dev Scan history for this domain/api/v1/domain/history/githubapi.911alex.workers.dev?limit=15

This website contacted 22 IPs in 2 countries across 12 domains to perform 185 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://githubapi.911alex.workers.dev/features/copilot/copilot-business

AI Security Verdict

Moderate Risk

Confidence: 72%

Risk Score

Full replica of GitHub's Copilot Business page served from an unrelated workers.dev subdomain, claiming GitHub branding. No forms or credential capture detected, but the impersonation makes it untrustworthy.

Risk Factors (4)

Impersonation of the GitHub brand on a domain that is not GitHub-owned

Complete cloning of GitHub Copilot Business page content and branding on a shared PaaS subdomain

Sign-in / sign-up calls to action displayed under GitHub branding on an unrelated host

Unknown-age free hosting subdomain with no reputation

Safety Factors (5)

Verified form facts: 0 forms, 0 password fields, 0 disguised password fields, 0 payment fields — no credential or payment capture on this page

No threat-intelligence matches, no hunting rule malware patterns, no known kit roster match, no Safe Browsing hit

No credential exfiltration and no suspicious JavaScript behavior detected

Content is informational marketing copy; external references point to legitimate GitHub and Google asset domains

Suricata alerts are informational ET INFO notices about the workers.dev platform itself, not malware or phishing signatures

Domain age information unavailable

Details

Page Title

GitHub Copilot Business · GitHub

Scan Type

public

Domain Name Analysis

Domain 'githubapi.911alex.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'githubapi.911alex'. The core label 'workers' covers 7 characters split between two vowels and five consonants. Splitting it apart reveals 1 word: workers. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

UNIVERSE'26 Join Uni se virtually, fron where. ©) Platform ~ solutions ~ Resources ~ Open Source ~ Enterprise ~ Pricing Search 7D) |{ signin | (Sianue Al GitHub Copilot Desktop App CopilotinVS Cod...

Page Load Overview

3.59s

Total Load Time

4.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:7,943 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software70% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

70%

corporate business

49%

forum community discussion

41%

documentation technical

40%

Detected Features

OG: object

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	104.21.34.107Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	185.199.111.215Fastly · CDN	United States	AS54113Fastly, Inc.
8	142.251.13.136Google · CDN	United States	AS15169Google LLC
8	140.82.113.22	United States	AS36459GitHub, Inc.
8	140.82.121.6	Frankfurt am Main, Hesse, Germany	AS36459GitHub, Inc.
8	185.199.108.215Fastly · CDN	United States	AS54113Fastly, Inc.
8	185.199.109.215Fastly · CDN	United States	AS54113Fastly, Inc.
8	185.199.110.215Fastly · CDN	United States	AS54113Fastly, Inc.
8	142.251.14.91Google · CDN	United States	AS15169Google LLC
8	3.174.46.31Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
185	22	-	-