Security firm discovers 186 fake AI website domains, involving 27 brands including ChatGPT and Claude

TechFlow reported on November 13, citing Cryptopolitan, that enterprise browser security company Island released a research report discovering 186 domains impersonating AI tools, involving 27 brands including ChatGPT, Claude, DeepSeek, and Gemini. Among them, ChatGPT had the most impersonated domains at 25, while Claude and DeepSeek had 18 and 16 respectively.

The research found that some fake websites exploit users' typos when entering URLs, redirecting them to malicious pages, tricking users into executing PowerShell commands via fake Cloudflare verification, or promoting software with browser-hijacking capabilities.

In addition, researchers found 30 browser extensions involved in search hijacking, 17 of which remain in use, with a cumulative user base of approximately 972,000.

Island emphasized that the 186 domains do not represent the actual number of infections, and the specific economic losses caused by the related attacks have not yet been confirmed.

Source: TechFlow