chaingpt-pad[.]com

PhishDestroy first observed chaingpt-pad.com on Oct 18, 2025. Current evidence score: 65/100 (high).

Positive findings are stored from 2 sources: VirusTotal and ScamSniffer. VirusTotal recorded 4 detections among 95 engines: CRDF, G-Data, Gridinsoft, SOCRadar on May 23, 2026 at 14:10 UTC. ScamSniffer listed the hostname in the separate external-blocklist snapshot on Aug 8, 2026 at 06:20 UTC. Non-positive and contextual checks: URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:38 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:12 UTC; content was unavailable. Registration records for the domain list CNOBIN INFORMATION TECHNOLOGY LIMITED as the registrar and Oct 8, 2025 as the creation date. Registration preceded first observation by 9 days. At collection time, the hostname resolved to 172.67.139.132 on AS13335 (CLOUDFLARENET, US). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on May 5, 2026 at 07:20 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance.

The record contains 2 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.