Phishing detection: chatgpt0005.eu.org

ChatGPT
https://chatgpt0005.eu.org/blog Access site
Screenshot
Screenshot of chatgpt0005.eu.org
Investigate
Domain chatgpt0005.eu.org1 CT host on apex
urlscan page.domain VirusTotal Whois
IP 172.67.192.219
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://chatgpt0005.eu.org/blog
urlscan Wayback archive.today
Cert WE1
crt.sh Censys Google CT
Phishunt analysis Beta
23 low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelOpenPhish
15 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Impersonates ChatGPT on a free .eu.org subdomain with a same-origin credential collection form detected. Flagged by OpenPhish as malicious and hosted on Cloudflare. The numbered domain name suggests mass registration of ChatGPT-themed phishing pages.

OpenPhishSame-origin formBrand in domain label
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 78%
Domain & Network
Whois
Registrar Gandi SAS
Network
IP 172.67.192.219
Country United StatesUnited States
Hosting Cloudflare, Inc.
ASN AS13335
TLS Cert WE1
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Related infrastructure Betasuspected links from shared infrastructure, not attribution
microsoftjk.eu.org 40 same apex same nameservers same registrar shared TLS SAN
active 2026-06-25
netflix.vpnuse.eu.org 40 same apex same nameservers same registrar shared TLS SAN
active 2026-04-08
Top 2 of 2 related · rebuilt daily · corr-1.2.0 · related infrastructure API
Report this phishing
Network / ASN Cloudflare, Inc.
Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-06-15 13:02 UTC  ·  Last refreshed 2026-07-31 01:30 UTC