The relays are real, the Claude is real — the operator is still nobody we can name

Asked:

“Search on x on github Full Deep Research”

A follow-up sweep across one promotional X post, 32 GitHub pages, 4 infrastructure records and 2 third-party LMSpeed API audits of related relay GoRouter. The audits confirm authentic Claude-family output (an 800,000-character context probe passed; the stream named claude-opus-5), and the panels are documented third-party New API relays — but no source, registrar record or error probe surfaced a human operator, legal entity or upstream credential source for JustWoker/JustDoWork, KKtoken or GoRouter.

verified by direct evidence plausible, unproven link unknown — no identifying evidence public promoter or cataloguer — not an operator

Hover any box or line for the evidence behind it. Dashed lines are unverified. Promoters on the right publicly advertised or catalogued these services; nothing shows they own or supply them.

Confidence matrix

ClaimStatusBasis
The model behind GoRouter's tested routes is Claude-family (Anthropic is the creator)VerifiedModel-authenticity checks passed; 800,000-character context probe; thinking route streamed base name claude-opus-5 — lmspeed.net
JustWoker/JustDoWork, KKtoken and GoRouter are third-party New API-style relay panelsVerifiedPanel identified as New API with documented endpoints and GitHub-OAuth signup — vibex.iflow.cn, github.com
The services are a shared or related operationPlausibleKKtoken called “exactly the same” as GoRouter and TabiAI; GoRouter and api.justwoker.icu share the frank/sandra Cloudflare nameserver pair — suggestive, not proof — tg.zrf.me, lmspeed.net
Requests travel through an AWS/Kiro or account-pool routePlausibleOne identity response said “Kiro is an AWS product” — a clue in model text, not routing proof — lmspeed.net
Human operator, legal entity, or credential sourceUnknownProvider field blank, signature unavailable, error probes leaked no upstream URL; WHOIS privacy-protected — gridinsoft.com

Evidence cards

X

Promotion, not disclosure

The one relevant X post advertises $750+ in signup credits across JustDoWork ($120), GoRouter ($50+), Tabitoken ($125) and others. It names no operator and no upstream.

x.com
GitHub

Configuration, not source

The ai-coding-welfare directory's sites.json documents JustDoWork in full — New API panel, ~$70 signup + ~$22 daily credits, GitHub-OAuth-only login requiring a 365-day-old account — but across 32 pages there is no routing source code and no credential evidence.

github.com
Infrastructure

Cloudflare hides the edge

api.justwoker.icu: registrar Cloudflare Inc., registrant privacy-protected, 34/100 trust score. GoRouter resolves through the same frank + sandra Cloudflare nameservers — an account-level echo that cannot prove ownership.

gridinsoft.com
API audit

The Claude is authentic

Two LMSpeed audits of gorouter.app: model authenticity 100/100 on the thinking route, 800,000-character context passed, stream model claude-opus-5, no hidden prompt injection found.

lmspeed.net
API audit

But the upstream stayed dark

The audit's Provider field is blank, the response signature is unavailable, and error probes did not leak an upstream URL. The only hint — “Kiro is an AWS product” — appeared inside a model's identity reply.

lmspeed.net
Comparison

Cloned panels, one family?

KKtoken was publicly described as “exactly the same” as GoRouter and TabiAI — credits, GitHub login, model catalog (four Claude Opus variants). A common panel design is certain; a common owner is not.

tg.zrf.me

What would settle it

Findings

“The real provider” has two senses — the model creator is Anthropic, confirmed by the audit; the hidden wholesale route and operator remain publicly unidentified. lmspeed.net
JustDoWork's own catalogue entry admits “the relay's upstream can change at any time” — even its promoters make no supply promise. github.com
Peng (@pengsonal), @lsmoo and panxunying promoted or catalogued these services publicly; no evidence shows any of them owns or supplies them, and this report makes no such claim. x.com
The nameserver overlap between GoRouter and api.justwoker.icu (frank + sandra.ns.cloudflare.com) is the strongest infrastructure clue found — and still only consistent with, not proof of, common ownership. lmspeed.net

Sources

SourceTypeWhat it shows

Follow-up investigation, evidence gathered through August 2026: 1 X post, 32 GitHub pages, 4 infrastructure records, 2 structured LMSpeed audit summaries with full audit text, and 14 service-comparison rows. Confidence tiers reflect direct documentary evidence only; nameserver reuse and model-response wording are treated as clues, not proof. GitHub pages unrelated to these relays (general Claude tooling issues) were cut from the source table for space. No private personal data is published and no accusation of operation is made against any named account.

This report was generated automatically by Keenable SELECT at a user's request, from publicly available web sources linked herein. Keenable does not review, verify, or endorse its contents and makes no representation as to accuracy, completeness, or timeliness; AI-based extraction may contain errors. Nothing in this report is investment, legal, financial, or other professional advice. All trademarks and referenced content remain the property of their respective owners; no affiliation or endorsement is implied. To report an error, rights concern, or request removal: legal@keenable.ai.

Keenable SELECTAsk your own question
Made with Keenable SELECT