Highscore 55 · flagged Thursday, September 3, 2026

chatgpt6.top

Appeared in the .top zone on Thursday, September 3, 2026; by the end of that day the census found boilerplate page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: chatgpt
+30
brand plus digits
matched: chatgpt6
+8
TLD with a high abuse rate
matched: top
+8
brand name at a retail registrar
matched: West263 International Limited
+8
identical page on many newborns
matched: 77 identical pages
+10
Registrar
West263 International Limited
Nameserver provider
Nameservers
ns1.363.hk, ns2.363.hk, ns3.363.hk, ns4.363.hk, ns5.363.hk, ns6.363.hk
First-day state
boilerplate page
HTTP status
400
Page title
400 Bad Request
Has a form
no
Brand echoed
chatgpt

Model opinions

Second opinionlooks like abusetarget: OpenAI (ChatGPT)confidence 72%· claude-opus-5

chatgpt6.top is a brand+digit squat on OpenAI's ChatGPT registered through a cheap retail registrar on .top with Chinese nameservers, and it serves only an nginx 400 Bad Request page as one of 77 identical sibling pages in the same cluster — a bulk brand-squat campaign with no legitimate content, though no deceptive page is yet deployed.

First passsuspicioustarget: OpenAI (ChatGPT)confidence 72%· claude-haiku-4-5

Domain name chatgpt6.top contains the ChatGPT brand with a digit suffix and uses a suspicious registrar (West263) typical of abuse campaigns. The page currently shows a 400 error, but the domain is part of a cluster of 77 identical pages with boilerplate content, suggesting infrastructure prepared for phishing. However, no active phishing page is currently visible, preventing a definitive phishing verdict.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, September 3, 2026

Screenshot of chatgpt6.top taken by the zone census on 2026-09-03

Same data as JSON: /api/zone/domain/chatgpt6.top. This page is not indexed by search engines and does not link to the site it describes.