Security Scan Report: github.gqga.workers.dev

Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 5 domains to perform 168 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://github.gqga.workers.dev/features/ai

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Cloned GitHub AI page on an unrelated workers.dev subdomain, with sign-in and sign-up links pointing at the impostor host. No form on this page, but clearly a brand-impersonation front; avoid.

Risk Factors (4)
Impersonation of GitHub's brand and site design on a domain GitHub does not own
Sign-in / sign-up call-to-action links resolve to a login path on the attacker-controlled host
Unranked domain not present in Cisco Umbrella top 1M despite claiming to be a major brand
Instant free subdomain on a shared hosting platform; actual page age unknown
Domain age information unavailable

Details

Page Title

GitHub AI · AI built into every step of your workflow · GitHub

Scan Type

public

Domain Name Analysis

You're looking at domain 'github.gqga.workers.dev' on the developer-focused generic top-level domain (.dev) with subdomain 'github.gqga'. Count 7 characters in 'workers' with two vowels and 5 consonants. It segments into one word: workers. Expect seven characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Seeatatm 2 \ = sewh 7D] Stnin UNIVERSE'26 Catch up on all that was announced. Q Products ~ Developers ~ Businesses ~ Resources ~ Pricing Al for every step of your workflow GitHub Copilot works wit...

Page Load Overview

10.33s
Total Load Time
3.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,658 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software43% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
43%
forum community discussion
36%

Detected Features

OG: object

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15185.199.110.215Fastly · CDNUnited States
AS54113Fastly, Inc.
1513.33.187.16Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
15140.82.112.21United States
AS36459GitHub, Inc.
15188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15185.199.108.215Fastly · CDNUnited States
AS54113Fastly, Inc.
15185.199.111.215Fastly · CDNUnited States
AS54113Fastly, Inc.
15185.199.109.215Fastly · CDNUnited States
AS54113Fastly, Inc.
1513.33.187.102Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
15140.82.114.21United States
AS36459GitHub, Inc.
16811--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16054F9F6A0B0E23E069F6BDBF4E15740D2E3165BC69A5EE5C01DC698C1C1C8CF66316A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:VfKEgLxazzitheR987XTFkBICPiwSpiReDdfh9tF5AUbphFBi775UJOn4iGJ6D:QEgLxazzitheR987XTFkBICPiwSpiReo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:281808:vKcwEViUiCA2ixBIcQRCCDJQDUhgYAoYFDIUtYACAHFcRCUQIAWgBoIoqgQCAkGSAyEUAJIkiHhfYDa4SDNAajYgsOIKwBFA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e33c381044001818
Perceptual Hash:8ca7a5a525ada58d
Difference Hash:866971a1d571b131
Wavelet Hash:f73d39197d011919
Color Hash:N/A

Other Hashes

Crop Resistant:866971a1d571b131

Scan History

Scan history not available

Unable to load historical scan data