Highscore 56 · flagged Tuesday, October 20, 2026

chatgptsubstitute.top

Appeared in the .top zone on Tuesday, October 20, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: chatgpt
+30
TLD with a high abuse rate
matched: top
+8
form on a brand-styled page
matched: has_form
+18
Registrar
—
Nameserver provider
Nameservers
dns13.hichina.com, dns14.hichina.com
First-day state
active website
HTTP status
200
Page title
Shop - 二星小店
Has a form
yes
Brand echoed
chatgpt

Model opinions

Second opinionlooks like abusetarget: OpenAIconfidence 80%· claude-opus-5-5

The name squats the ChatGPT brand and the page uses the ChatGPT logo, but the site is a grey-market Chinese account-resale shop ('二星小店') selling ChatGPT Plus/Pro accounts, redeem codes, SMS-verification bypass (短信接码) and aged Instagram accounts. The only form is a product search, so this is not an OpenAI credential phish; it is a brand-squat front for illicit account trading.

First passlooks like abuseconfidence 92%· claude-haiku-4-5

This is a marketplace reselling ChatGPT accounts and credentials under a typosquat domain (chatgptsubstitute.top). While it uses ChatGPT's logo and name prominently, it is not impersonating OpenAI to steal credentials—it is openly selling account access, SMS codes, and account packages as a counterfeit goods/account resale operation. The page title is a Chinese shop name ('二星小店'), not OpenAI branding, and the site operates as its own storefront with sign-in/sign-up for customers. This is credent

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, October 20, 2026

Screenshot of chatgptsubstitute.top taken by the zone census on 2026-10-20

Same data as JSON: /api/zone/domain/chatgptsubstitute.top. This page is not indexed by search engines and does not link to the site it describes.