Shadow AI FinderDomains used by GitHub Copilot
GitHub Copilot is in the Coding assistant category. These 3 domains and their subdomains identify its traffic in DNS, proxy and firewall logs.
These tools read source code from a developer's editor to suggest or write code, so code and any secrets in it can be sent to the service.
Domain list
| Domain | Covers |
|---|---|
githubcopilot.com | githubcopilot.com and every subdomain (*.githubcopilot.com) |
copilot-proxy.githubusercontent.com | copilot-proxy.githubusercontent.com and every subdomain (*.copilot-proxy.githubusercontent.com) |
origin-tracker.githubusercontent.com | origin-tracker.githubusercontent.com and every subdomain (*.origin-tracker.githubusercontent.com) |
githubcopilot.com copilot-proxy.githubusercontent.com origin-tracker.githubusercontent.com
Block or allow GitHub Copilot
Ready-made entries for common systems. Blocking can break things people rely on, so decide with the teams who use it first.
Plain domain list
One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains.
# Block list — Plain domain list # GitHub Copilot (3 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains. copilot-proxy.githubusercontent.com githubcopilot.com origin-tracker.githubusercontent.com
Wildcard list (*.domain)
Each domain plus a *.domain entry, for gateways that need explicit wildcards.
# Block list — Wildcard list (*.domain) # GitHub Copilot (3 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # Each domain plus a *.domain entry, for gateways that need explicit wildcards. copilot-proxy.githubusercontent.com *.copilot-proxy.githubusercontent.com githubcopilot.com *.githubcopilot.com origin-tracker.githubusercontent.com *.origin-tracker.githubusercontent.com
Hosts file
Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage.
# Block list — Hosts file # GitHub Copilot (3 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage. 0.0.0.0 copilot-proxy.githubusercontent.com 0.0.0.0 githubcopilot.com 0.0.0.0 www.githubcopilot.com 0.0.0.0 origin-tracker.githubusercontent.com
dnsmasq
address=/domain/ also blocks every subdomain.
# Block list — dnsmasq # GitHub Copilot (3 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # address=/domain/ also blocks every subdomain. address=/copilot-proxy.githubusercontent.com/0.0.0.0 address=/githubcopilot.com/0.0.0.0 address=/origin-tracker.githubusercontent.com/0.0.0.0
Unbound
Add to unbound.conf under server:. always_nxdomain covers subdomains.
# Block list — Unbound # GitHub Copilot (3 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # Add to unbound.conf under server:. always_nxdomain covers subdomains. local-zone: "copilot-proxy.githubusercontent.com." always_nxdomain local-zone: "githubcopilot.com." always_nxdomain local-zone: "origin-tracker.githubusercontent.com." always_nxdomain
BIND response policy zone (RPZ)
Records for a response-policy zone. Add your zone's SOA and NS records at the top.
; Block list — BIND response policy zone (RPZ) ; GitHub Copilot (3 domains) ; Generated by Shadow AI Finder (shadowaifinder.com) ; Records for a response-policy zone. Add your zone's SOA and NS records at the top. copilot-proxy.githubusercontent.com CNAME . *.copilot-proxy.githubusercontent.com CNAME . githubcopilot.com CNAME . *.githubcopilot.com CNAME . origin-tracker.githubusercontent.com CNAME . *.origin-tracker.githubusercontent.com CNAME .
Pi-hole regex
Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains.
# Block list — Pi-hole regex # GitHub Copilot (3 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains. (\.|^)copilot-proxy\.githubusercontent\.com$ (\.|^)githubcopilot\.com$ (\.|^)origin-tracker\.githubusercontent\.com$
Squid dstdomain
A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule.
# Block list — Squid dstdomain # GitHub Copilot (3 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule. .copilot-proxy.githubusercontent.com .githubcopilot.com .origin-tracker.githubusercontent.com
Check a log for GitHub Copilot
Paste log lines to see whether GitHub Copilot shows up and how often. Nothing leaves your browser.
Knowing the domains is step one
A list tells you where traffic goes. Agent Trust Cloud keeps an inventory of AI agents, who owns each, and what it may do, and applies your policy before an agent acts. Discover, the monitor-only tier, is free.