Security Report: promotion-chatgpt.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5e7aa5ee-08db-4571-8d13-44deb393be8c Domain and IP registration (RDAP)/api/v1/rdap/5e7aa5ee-08db-4571-8d13-44deb393be8cHow often this domain was scanned/api/v1/domain/stats/promotion-chatgpt.com Scan history for this domain/api/v1/domain/history/promotion-chatgpt.com?limit=15

This website contacted 46 IPs in 3 countries across 19 domains to perform 76 HTTP transactions. The main domain is promotion-chatgpt.com and was registered 5 months ago.

Submitted URL: https://promotion-chatgpt.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake 'free ChatGPT' page using a ClickFix fake-verification prompt to trick users into pasting PowerShell/Terminal commands that download and run a remote, obfuscated script. Brand impersonation plus phishing threat-intel and a vetted malicious kit.

Risk Factors (5)

Brand impersonation of ChatGPT/OpenAI on a domain that is not openai.com or chatgpt.com

ClickFix-style social engineering: fake 'Sign in to confirm you're not a bot' prompt driving visitors to run shell commands

Shell commands fetched from an unrelated third-party host (claudescript.top) with obfuscated base64 payload

Telegram bot token embedded in page script for data exfiltration

Threat-intel phishing match corroborated by multiple feeds on the primary domain

Domain age information unavailable

Details

Page Title

ChatGPT, now free for everyone | ChatGPT by OpenAI

Scan Type

public

Domain Name Analysis

You're looking at domain 'promotion-chatgpt.com' on the commercial generic top-level domain (.com) while skipping any subdomain. Count 17 characters in 'promotion-chatgpt' split between five vowels and 11 consonants, notching 1 hyphen. Word splitting yields 4 words: promotion, chat, gp, t. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.40s

Total Load Time

3.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,861 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software90% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

90%

documentation technical

61%

social media network

52%

education learning

49%

government public service

49%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
31	172.67.150.210Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.160.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	18.64.181.198Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	104.18.1.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	18.245.86.4Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	160.79.104.10	United States	AS399358Anthropic, PBC
1	142.251.20.190Google · CDN	United States	AS15169Google LLC
1	142.251.154.4Google · CDN	United States	AS15169Google LLC
76	46	-	-