chatgpt-web[.]vipDomain
Reported by 1 independent source · first reported by Sekoia.io · last reported
Last reported 1 month ago
What the reports say
2 reports, newest first · the exact sentence from each-
Exvicy: A Copycat of the ErrTraffic Malware Distribution Framework“An example of the ErrTraffic JavaScript retrieved from chatgpt-web[.]vip is available on Gist (ErrTraffic JavaScript implementing ClickFix actions using a reCAPTCHA lure), as scanned via urlquery.net in June 2026.”
-
ErrTraffic: A Growing ClickFix Malware Distribution Framework“The malicious domain chatgpt-web[.]vip mimics the official ChatGPT landing page and was registered on 22 May 2026, via Dynadot.”
Indicators reported together
named in the same reports- flare[.]ioin 1 report
- cloudflarecapcha[.]comin 1 report
- perfectverified[.]comin 1 report
- newsecuredevice[.]comin 1 report
- unitedstateverif[.]comin 1 report
- hxxps://us-addnewdevice[.]com/panelin 1 report
- us-addnewdevice[.]comin 1 report
- hxxps://us-addnewdevice[.]comin 1 report
- hxxps://onlineprivacyprotect[.]com/panelin 1 report
- onlineprivacyprotect[.]comin 1 report
- hxxps://wwwnewdevice[.]org/panelin 1 report
- wwwnewdevice[.]orgin 1 report
- hxxp://89.34.90[.]159/panelin 1 report
- 89.34.90[.]159in 1 report
- hxxp://89.34.90[.]150/panelin 1 report
- 89.34.90[.]150in 1 report
- hxxp://91.92.33[.]213/panelin 1 report
- 91.92.33[.]213in 1 report
- hxxp://151.243.113[.]21/panelin 1 report
- 151.243.113[.]21in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.