chat-gpt-next-web2-phi-ochre[.]vercel[.]app

This report analyzes the domain chat-gpt-next-web2-phi-ochre.vercel.app, which is actively impersonating the ChatGPT brand. The site's page title, "ChatGPT Next Web," and its classification as an impersonation scam indicate it poses a threat by deceiving users into believing they are accessing a legitimate ChatGPT service. Such sites are commonly used for credential harvesting, malware distribution, or financial fraud.

Technical analysis reveals the site has zero detections from 95 VirusTotal vendors, indicating it evades standard security checks. It is flagged by one blocklist. The domain was registered through Tucows Domains Inc. and created on 2026-02-21. It resolves to IP address 64.29.17.195, located in the United States and hosted by AS16509 Amazon.com, Inc. The site uses an SSL certificate issued by Google Trust Services / WR1 and has a current status of ACTIVE. Additionally, content cloaking (content_split) was detected, suggesting the site serves different content to scanners versus real users.

The risk level is high, as indicated by a GridinSoft trust score of 0/100 and a DOM risk score of 83. The site's active status, low trust score, and use of cloaking techniques make it a significant threat for impersonation attacks. Users should avoid interacting with this domain.