Domain Intelligence

chatgp.org

Low-risk posture with minor configuration gaps.

Low Risk Sav.com, LLC 75 days old
no_dmarc_record dnssec_not_validated no_caa_records

Threat Score

13 /100

Low Risk

Domain appears safe

Risk score

13/100

low risk

Server IPs

2

resolved address records

Mail posture

DMARC missing

mail provider not classified

DNS controls

No DNSSEC

CAA missing

Server Infrastructure

Resolved IPs with ASN, country, and provider data

2 servers
IP Address Location ASN / Org Provider Reverse DNS
76.223.54.146 A US
AS16509

AMAZON-02 - Amazon.com, Inc., US

AWS AWS a904c694c05102f30.awsglobalaccelerator.com
13.248.169.48 A US
AS16509

AMAZON-02 - Amazon.com, Inc., US

AWS AWS a904c694c05102f30.awsglobalaccelerator.com

DNS Records

Address, mail, text, and certificate records from public DNS

8 records
A (2) MX (1) NS (2) TXT (2) SOA (1)
A 2 records
Name Value TTL
chatgp.org 76.223.54.146 3600s
chatgp.org 13.248.169.48 3600s
MX 1 record
Name Value TTL
chatgp.org 0 . 3600s
NS 2 records
Name Value TTL
chatgp.org ns1.afternic.com. 86400s
chatgp.org ns2.afternic.com. 86400s
TXT 2 records
Name Value TTL
_dmarc.chatgp.org "v=spf1 -all" 3600s
chatgp.org "v=spf1 -all" 3600s
SOA 1 record
Name Value TTL
chatgp.org ns2.afternic.com. dns.jomax.net. 1 28800 7200 604800 86400 3600s

Email & DNS Security

Mail authentication posture and DNS security controls

Mail Provider

Not classified

Authentication

MX Records
Present
SPF Record
Strict
DMARC Policy
Missing

Authentication Flow

flowchart LR
  A["Email\nfrom chatgp.org"] --> B["SPF\nStrict -all"]
  B --> C["DMARC\nMissing"]
  C --> D["Domain can\nbe spoofed"]:::bad

DNS Security

DNSSEC
Not enabled
CAA Records
Missing

Nameservers

ns1.afternic.comns2.afternic.com

WHOIS & Registrar

Registration details via RDAP

RDAP

Registrar

Sav.com, LLC

IANA #3920

Abuse: abuse-contact@sav.com

Registration Dates

Domain age

75 days

Created

Mar 21, 2026

Updated

May 20, 2026

Expires

Mar 21, 2027

Registrant

Privacy protected
Name REDACTED FOR PRIVACY
Phone +1.8723954105
Location IL, 60455, US

Some of the data in this object has been removed

Status

client transfer prohibited

Similar Domains

Typosquat and adjacent-domain candidates resolved with public DNS

5 active
resolves

missing last character

176.123.0.55

resolves

repeated last character

37.97.254.27, 2a01:7c8:3:1337::27

app suffix

app suffix without separator

login suffix

resolves

.com TLD swap

66.175.209.179, 45.79.167.180 +6 more

resolves

.net TLD swap

76.223.54.146, 13.248.169.48

resolves

.io TLD swap

3.33.130.190, 15.197.148.33

Self-hostable Threat Feeds

Free feed candidates for VPS import β€” no paid DNSBLs queried at runtime

HaGeZi Threat Intelligence Feed

recommended plain domain list

Malware, phishing, scam, and high-confidence threat domains for local DNS filtering.

License
GPL-3.0
Source
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/domains/tif.txt

HaGeZi Newly Registered Domains

optional plain domain list

Freshly observed domains often abused in short-lived campaigns.

License
GPL-3.0
Source
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/domains/nrd.txt

URLhaus hostfile

recommended hosts file

Active malware distribution hosts that can be mirrored into a local resolver or VPS matcher.

License
abuse.ch community API fair use
Source
https://urlhaus.abuse.ch/downloads/hostfile/

URLhaus RPZ

optional DNS RPZ

Response Policy Zone feed for VPS-hosted DNS enforcement.

License
abuse.ch community API fair use
Source
https://urlhaus.abuse.ch/downloads/rpz/

Queried 6/4/2026, 7:31:24 PM Β· 2551ms