chatgpt-codex-lm[.]gitlab[.]io
“Nur einen Moment…”
Ringkasan bukti
This domain is flagged as a high-risk phishing site specializing in fake AI service impersonation. Analysis indicates the threat actor is attempting to deceive users into believing they are interacting with a legitimate AI coding assistant or language model interface, likely to harvest credentials or distribute malicious payloads under the guise of software updates or authentication prompts.
Infrastructure analysis reveals the following technical indicators: VirusTotal detection ratio of 1/95 security vendors, indicating minimal but confirmed malicious classification. The domain is hosted on GitLab Pages infrastructure, resolving to IP address 35.185.44.232. The SSL certificate is issued by GlobalSign nv-sa, providing a false sense of security while the underlying content remains fraudulent. As of the latest verification, the domain remains active and unblocked by most security platforms, increasing its potential reach.
Mitigation requires immediate action from both users and administrators. End users should avoid interacting with any login prompts, download buttons, or API key requests presented by this domain. Network administrators are advised to block the domain and its resolving IP (35.185.44.232) at the perimeter level. Security teams should monitor for credential submissions or unusual outbound connections to gitlab.io subdomains, particularly those mimicking AI service names. Given the domain's hosting on a legitimate platform, additional scrutiny of all gitlab.io subdomains for similar patterns is recommended to identify related threat infrastructure.
Data Coverage
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of chatgpt-codex-lm.gitlab.io · checked Jun 26, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive