# Phishing sites impersonating Openai PhishDestroy has recorded 24 phishing domains impersonating Openai since 2025-08-09, 3 of them in the last 30 days. The most used registrars are NICENIC and Global Domain; the most common TLDs are .com and .dev. Open Openai only from its official app or a saved bookmark. 24Domains, all time 3Last 30 days 14Online at last check 5Confirmed takedowns ## New domains in the last 90 days Openai phishing domains detected per day: 5 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Openai site Words most often added to the brand in reported domains: axecho, stonkfun, spectraquantumstesla, quantumaiteslaauto, allocation, arkm, arbitrium, world, coin, poland. - Type the address yourself or use a bookmark; phishing links for Openai arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Openai does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Openai phishing domains The 24 most recently detected domains impersonating Openai Domain | First detected | Status at last check | Registrar | [genesis-variational.com](https://phishdestroy.io/domain/genesis-variational.com/) | 2026-10-21 | Unknown | NICENIC | [naijallm.com](https://phishdestroy.io/domain/naijallm.com/) | 2026-10-20 | Online | GoDaddy.com | [docs-google.one](https://phishdestroy.io/domain/docs-google.one/) | 2026-10-19 | Online | Porkbun | [airdrop-stonkfun.com](https://phishdestroy.io/domain/airdrop-stonkfun.com/) | 2026-09-12 | Offline | NICENIC | [quests-stonkfun.xyz](https://phishdestroy.io/domain/quests-stonkfun.xyz/) | 2026-09-08 | Unknown | NICENIC | [axecho.ai](https://phishdestroy.io/domain/axecho.ai/) | 2026-05-12 | Online | https://www.101domain.com/ | [echo.axecho.com](https://phishdestroy.io/domain/echo.axecho.com/) | 2026-05-01 | Online | Name SRS | [wise-violet-6tgyh9mtaj-789nui1429.edgeone.app](https://phishdestroy.io/domain/wise-violet-6tgyh9mtaj-789nui1429.edgeone.app/) | 2026-04-27 | Taken down | Tencent EdgeOne | [atx-ai.org](https://phishdestroy.io/domain/atx-ai.org/) | 2026-04-20 | Offline | NAMECHEAP | [dhuddly-dev-portfolio.pages.dev](https://phishdestroy.io/domain/dhuddly-dev-portfolio.pages.dev/) | 2026-04-06 | Online | Cloudflare | [tesserape.xyz](https://phishdestroy.io/domain/tesserape.xyz/) | 2026-03-30 | Offline | OwnRegistrar | [ww2.chatgpt.mein-konto-hilfe.com](https://phishdestroy.io/domain/ww2.chatgpt.mein-konto-hilfe.com/) | 2026-03-21 | Offline | Registrar.eu | [akashportfolio-gamma.vercel.app](https://phishdestroy.io/domain/akashportfolio-gamma.vercel.app/) | 2026-02-26 | Online | Tucows Domains | [io-aigroup.space](https://phishdestroy.io/domain/io-aigroup.space/) | 2026-01-26 | Online | HOSTINGER operations | [puffer-fi.coinverified.com](https://phishdestroy.io/domain/puffer-fi.coinverified.com/) | 2026-01-24 | Online | TurnCommerce, DBA NameBright.com | [social.babaservice.online](https://phishdestroy.io/domain/social.babaservice.online/) | 2025-12-27 | Online | HOSTINGER operations | [popularconsult.com](https://phishdestroy.io/domain/popularconsult.com/) | 2025-12-14 | Taken down | INWX | [uphlod.pages.dev](https://phishdestroy.io/domain/uphlod.pages.dev/) | 2025-12-03 | Taken down | Cloudflare | [deepwalrusai.com](https://phishdestroy.io/domain/deepwalrusai.com/) | 2025-11-06 | Taken down | Porkbun | [world-coin-poland.pl](https://phishdestroy.io/domain/world-coin-poland.pl/) | 2025-10-28 | Offline | home.pl | [arbitrium.store](https://phishdestroy.io/domain/arbitrium.store/) | 2025-10-24 | Taken down | Tucows Domains | [allocation-arkm.com](https://phishdestroy.io/domain/allocation-arkm.com/) | 2025-09-25 | Online | Web Commerce Communications | [quantumaiteslaauto.com](https://phishdestroy.io/domain/quantumaiteslaauto.com/) | 2025-08-09 | Offline | Global Domain | [spectraquantumstesla.com](https://phishdestroy.io/domain/spectraquantumstesla.com/) | 2025-08-09 | Offline | Global Domain | [All 24 Openai reports](https://phishdestroy.io/domain/?brand=Openai) ## Where they are registered and hosted ### Registrars - [NICENIC](https://phishdestroy.io/registrar/nicenic/)3 - [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)2 - [Tucows Domains](https://phishdestroy.io/registrar/tucows/)2 - Cloudflare2 - [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)2 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)1 - home.pl1 - [Porkbun](https://phishdestroy.io/registrar/porkbun/)1 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)11 - [.dev](https://phishdestroy.io/tld/dev/)2 - [.app](https://phishdestroy.io/tld/app/)2 - [.xyz](https://phishdestroy.io/tld/xyz/)2 - [.store](https://phishdestroy.io/tld/store/)1 - [.pl](https://phishdestroy.io/tld/pl/)1 - [.online](https://phishdestroy.io/tld/online/)1 - [.space](https://phishdestroy.io/tld/space/)1 ### Hosting networks - Cloudflare, Inc.6 - CLOUDFLARENET, US4 - AS-COLOCROSSING, US2 - Microsoft Corporation2 - HOMEPL-AS home.pl S.A., PL1 - GOOGLE-CLOUD-PLATFORM, US1 - ULTAHOST-AS Ultahost, Inc., US1 - AMAZON-02 - Amazon.com, Inc., US1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Openai; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/openai/