Security Scan Report: chatgptdavid.com

Site favicon
Submitted: Sep 21, 2026, 7:47:25 PMCompleted: Sep 21, 2026, 7:47:47 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Legit-looking ChatGPT webinar page is a front: primary domain flagged as a malware loader, it pulls a malware-flagged third-party resource, and triggers a CRITICAL EtherHiding network-trojan alert.

Risk Factors (5)
Primary domain carries a content-malware Indicator of Compromise (malware loader)
Loads a third-party domain flagged as malware by two independent threat feeds
CRITICAL network IDS alert for a network trojan (EtherHiding exfiltration)
Connects to a blockchain RPC endpoint, consistent with EtherHiding payload delivery
Unranked domain with low business-legitimacy score (30/100)
Domain age information unavailable

Details

Page Title

56David ChatGPT TrainingChatGPT Unlocked: Beginner Webinar on July 10th at 7pm

Scan Type

public

Domain Name Analysis

The domain 'chatgptdavid.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'chatgptdavid' is 12 characters long split between three vowels and 9 consonants. Breaking it apart gives 4 words: chat, gp, t, david. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://chatgptdavid.com

Page Load Overview

2.50s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,214 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
64%
documentation technical
40%
corporate
35%
social media network
32%
government public service
26%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
923.227.182.178Dallas, Texas, United States
AS29802HIVELOCITY, Inc.
5142.251.152.119Google · CDNUnited States
AS15169Google LLC
5142.251.153.119Google · CDNUnited States
AS15169Google LLC
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.20.94Google · CDNUnited States
AS15169Google LLC
5142.251.154.119Google · CDNUnited States
AS15169Google LLC
397--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14E521AB157D279E01E78EB01BBFFB55C0641A83B5432A9E3C20F5D8D287A0DB9016E67

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:BPTwA9fNwMKDfNQ62Ho/xE6x4aUg/5j/nfnDys:RV9i5Q62I/xE6x4g5bn/d

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13784:okHoScEDtGQuZGIEQSEQzAWrJQFKCnWAKCAD4UAEmUEYw8QhHhRkJWbIgQAAEORAAA9YhYQJiAWDUIKAh2hcVMjkCINCIAgC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000ffffff
Perceptual Hash:8809f1f2271ec767
Difference Hash:f9f3f361cd20b034
Wavelet Hash:00000000ffffffff
Color Hash:#1f9370

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data