Security Report: github.449378259.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ab8bfc42-c617-4aad-a540-905f6ede3f35 Domain and IP registration (RDAP)/api/v1/rdap/ab8bfc42-c617-4aad-a540-905f6ede3f35How often this domain was scanned/api/v1/domain/stats/github.449378259.workers.dev Scan history for this domain/api/v1/domain/history/github.449378259.workers.dev?limit=15

This website contacted 14 IPs in 2 countries across 5 domains to perform 167 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: http://github.449378259.workers.dev/features/ai

Effective URL:

https://github.449378259.workers.dev/features/ai

Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

Risk Score

Workers.dev subdomain that presents itself as GitHub and reproduces GitHub's Copilot/AI page, but has no forms, no credential capture and no threat-intel, YARA or Safe Browsing hits. Likely an unofficial mirror; do not enter credentials or download anything. Moderate risk, not confirmed phishing.

Risk Factors (4)

Brand of a different entity (GitHub) displayed on a domain that is not GitHub's official domain

Hosted on a free, unauthenticated workers.dev subdomain with unknown page creation date

Unranked / no domain reputation

Clone of a well-known brand's marketing page, a common pattern for future phishing or redirect lures

Safety Factors (4)

No forms at all — no password, payment or email fields, and no credential exfiltration detected

No Indicators of Compromise, no Google Safe Browsing hit, no YARA malware patterns, no known malicious kit in the kit roster

Cross-origin requests go to api.github.com and collector.github.com (GitHub's own endpoints) and to ranked top-1M third-party script hosts, which is normal for mirrored GitHub content

Content is informational/product documentation with no urgency, reward or payment solicitation

Domain age information unavailable

Details

Page Title

GitHub AI · AI built into every step of your workflow · GitHub

Scan Type

public

Domain Name Analysis

You're looking at domain 'github.449378259.workers.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'github.449378259'. Its registrable label 'workers' stretches across 7 characters holding two vowels versus 5 consonants. Breaking it apart gives one word: workers. Average segment length settles at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

16.20s

Total Load Time

3.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:5,995 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

66%

documentation technical

39%

forum community discussion

33%

Detected Features

OG: object

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
24	172.67.198.235Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	185.199.111.215Fastly · CDN	United States	AS54113Fastly, Inc.
11	3.174.46.114Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
11	140.82.112.22	United States	AS36459GitHub, Inc.
11	140.82.121.5	Frankfurt am Main, Hesse, Germany	AS36459GitHub, Inc.
11	104.21.60.173Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	185.199.110.215Fastly · CDN	United States	AS54113Fastly, Inc.
11	185.199.109.215Fastly · CDN	United States	AS54113Fastly, Inc.
11	185.199.108.215Fastly · CDN	United States	AS54113Fastly, Inc.
11	3.174.46.65Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
167	14	-	-