chatlgpt.com
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of chatlgpt.com
chatlgpt.com appears to present itself as a download page for a ChatGPT desktop client, with Chinese-language content advertising Windows and macOS versions and using ChatGPT branding. The page title and visible layout suggest it is targeting users looking for an official desktop application, and it includes references to OpenAI help and policy pages to reinforce that impression.
Based on the domain name and page content, this site appears to be positioned as a software-download or technology-related landing page rather than a general information site. However, the domain itself is a close spelling variant of chatgpt.com, which may indicate an attempt to attract visitors who intended to reach the official ChatGPT website.
Safety Assessment for chatlgpt.com
Several risk indicators were present at the time of this scan. The domain was flagged by 4 security engines, including phishing-related detections, and the site closely resembles the official ChatGPT domain name while presenting itself as an official desktop download page. That kind of naming pattern may indicate a look-alike website intended to capture traffic meant for the legitimate service. The domain is also very new, has no established traffic ranking, and includes a downloadable ZIP file that was generically flagged during scanning.
Although some checks did not detect active malware and major threat databases were not broadly listing the site at the time of this scan, one blacklist source did list the domain and the overall context remains concerning. The combination of a newly registered look-alike domain, branding that appears to reference a well-known service, and phishing-related engine detections materially raises the risk profile. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was using a valid Let's Encrypt SSL certificate at the time of this scan, which means traffic may be encrypted in transit, but HTTPS alone does not verify that the operator is legitimate. DNSSEC appears to be unsigned, and the domain was registered only 6 days before the scan through REALTIME REGISTER B.V.
The server resolved to IP address 27.124.21.206, with hosting attributed to Rackip Consultancy Pte. LTD and a reported web server banner of bsncdn in New Delhi, India. No major TLS misconfiguration details were provided, but the combination of very recent registration, unsigned DNSSEC, and a downloadable installer-themed file on a look-alike domain may be considered technical caution signals.
Share your experience with this website. Was it safe? Did you encounter any issues?