Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/openai
Generated: Tue, 20 Oct 2026 11:38:18 GMT
Target Website: openai.com
Overall Trust Score: 88/100 (Trusted)
openai.com
Trusted
Scanned: Oct 20, 11:38 AMTRUST SCORE
88
CONFIDENT
Low Risk
88/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
98/100
98/100
TRANSPARENCY
15/100
15/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
70/100
70/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
88/100 — trusted. Long-established domain (19.7 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
C=US, O=Let's Encrypt, CN=YR1
Threat Status
CleanClean
No blacklists or malware
Domain Age
19.7 years19.7 years
Registered 1/19/2007
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
172.64.154.211172.64.154.211
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
100 / 100100 / 100
Fast response time
Redirects
DirectDirect
No redirect hops
Top Priority RecommendationAction Needed
Site returned HTTP 403
The server is reachable but did not return a success status.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- HTTPS is enforced
- Fast response (3ms)
- Served through Cloudflare
- 2 address record(s) resolved
- 4 authoritative nameservers
- Domain registered 20+ years ago
- Owner information disclosed
- Valid SSL / TLS certificate active
Warnings
- Site returned HTTP 403
- Certificate expires soon (5 days)
- Missing Content Security Policy
- No mobile viewport meta tag
- Page has no <title>
- No privacy policy found
- No terms of service found
- No contact page found
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- January 19, 2007 (19.7 years ago)
- Last Updated
- October 17, 2024
- Registry Expiry Date
- January 19, 2029
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 20+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: Content Security Policy
All Response Headers (22)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Missing Content Security Policy
Restricts which scripts and resources the page can load.
-4
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Permissions Policy is set
Restricts access to powerful browser features (camera, mic, etc.).
+2
- IPv4 Addresses (A)
- 172.64.154.211, 104.18.33.45
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), alt3.aspmx.l.google.com (Priority: 10), alt4.aspmx.l.google.com (Priority: 10)
- Authoritative Nameservers (NS)
- ns1-02.azure-dns.com, ns2-02.azure-dns.net, ns3-02.azure-dns.org, ns4-02.azure-dns.info
- TXT Records Found
- 47 TXT verification records
A Records (IPv4)
172.64.154.211104.18.33.45
TXT Verification Records
mgverify=22d53df776e7e9198e72a000c4056f5ba1624b8f2a50e3d0f4925fcea15bb5d4
autodesk-domain-verification=HucZBMSc_T52XRJSn15D
atlassian-domain-verification=xdHUKPdNqeX/XU/VMyGIRWfzqvhwWmcHR1DhX2J3JllvjIY3A0Aw9Ctst0DXGIgt
parsec-domain-verification=td_30Hu4AtBG9pDT9HTJCFK42bxN3q
whimsical=a3593eda7e8523a75b01fd953cac04549faefe0c
hiAwXiKX20HcM9FtFK90WRyUFLSV1w
notion-domain-verification=GZFdn3LQ77QuL3XKYZT6BmKDkFfmbiAorjzDIdvLRd6
onetrust-domain-verification=7acf44f596f84700bc82bfaaeb9b388c
uber-domain-verification=77dfb7a6-1534-4c1b-a4e2-ba173fa8e9a3
hubspot-developer-verification=NDFmMGNmMTYtZWYxNS00YTNlLWFkM2ItMjEwYzhmYTk0NTNi
ms-domain-verification=a14381d7-1e61-4cbf-97fa-4ac14336f0cf
airtable-verification=dea7eaaa4d90e623ec30a9b2fa12ca5f
onetrust-domain-verification=6bfaeb2a9cdf438bad3b7b30e745f3ed
autodesk-domain-verification=C3oU6DmT-SfRlU0htRMR
miro-verification=0ee819554f4ff63f853affdf30d1cf76a15c6846
linear-domain-verification=83vxugur897f
dropbox-domain-verification=mra9n6toqbqj
box-domain-verification=e2ecedffb7ea6f02e5f7a4afdbb83e2892f81db3acd85ff600633ad76096d459
google-site-verification=BDCE3pqO3BG5T5jWaEmQl10f5gqe3GAXgjyV0pmA5Jo
apple-domain-verification=EgaXvYuVUgRwJTk3
ZOOM_verify_Ji3VecODDwjBgU1GccqGAC
smartsheet-site-validation=b4J2lcr0i94a3_8qW2jIQxWjyqlGUmF1
v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:8050860.spf04.hubspotemail.net include:mktomail.com include:spf_c.oraclecloud.com -all
calendly-site-verification=fBZScJDPHrHKIWIb9dKdryZqPPcCkxGISR8z5xSdX
google-site-verification=dU3pms6hgznfQnTCxkcq6P4jGjd8LMra0v429l4oElA
airalo-domain-verification=xFzIMCLQ9JTlUFK
hibp-verify=dweb_bngtm5m5asvzv8o0xxyy9pxb
stripe-verification=b1d42b65d1782470604a6dbb360e9dfe8bd7426974e5110605e86b22d945288d
docker-verification=e315e0c2-f866-4bec-ac0c-844fa287bbec
atlassian-domain-verification=Q2BUDjXbr3zZaNROQ1MyCjvItM31fbzhL/GR5YEn96BAAyQzrQfkxaxxWC2qj/s5
figma-domain-verification=274542735efe890a700405d9916de07a971b531a0d1595c237b09d68770febf4-1762810003
mongodb-site-verification=9cei4YAQ08Y8uafD0DLW2sgyYqTNDtco
tukj3psjdk
twilio-domain-verification=c7745eae53aa58c5874d7a8508c510bc
pylon-domain-verification-na3cfk=bYVknYT5uGxjut616RQY8fCHj
dtm-domain-verification=yaoiU11N90j1RKR3IObEMhQO8WHP8K4zTGmCYlUIr6k
MS=ms50231473
canva-site-verification=3pgWM7c4EwmBo5rsy9b2Mg
openai-domain-verification=dv-un30neQJyISDPkxgKgArFtEc
google-site-verification=3uGPpoo5B2gXoFNwT4pfAJwH-1gjVj-fLqVSE6rCXGk
postman-domain-verification=dc3e890ca92455e54d07dcec9ea8404fc401b0a5a900dfb759062cd1dc68b28f7bc7db58254e4936ff8a9303f38cb9719e1af16757b09e0067c635510c90cde8
central-10085
wrike-verification=NjMwNjgwMjo0NmU2YjQ1NjgzNGJkN2M3MmYwNWUyMTNhOWUwOGY0OTQxYjBlNWJmZTEwYjYzOWU5MDNlMDlkYzAxNGZlZDRh
uber-domain-verification=faf07776-4ec9-4fd0-9ac5-2a6f8c514318
TAILSCALE-FAWYbK3UOL8Tf83rkJoc
google-site-verification=9sG4lDm5hmXEmnwpVGkId_ftzq-b84TYi0rwy9J-f9s
jamf-site-verification=2ysWIpJrXkO40kW1SNc8Qg
2 address record(s) resolved
+4
4 authoritative nameservers
+2
- Registrable Domain
- openai.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- ns1-02.azure-dns.com, ns2-02.azure-dns.net, ns3-02.azure-dns.org, ns4-02.azure-dns.info
- Registration Lifecycle
- Registered: 2007 → Expires: 2029
Nameservers (NS)
ns1-02.azure-dns.comns2-02.azure-dns.netns3-02.azure-dns.orgns4-02.azure-dns.info
Domain registered 20+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:8050860.spf04.hubspotemail.net include:mktomail.com include:spf_c.oraclecloud.com -all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; rua=mailto:tdfyvl0n@ag.dmarcian.com; ruf=mailto:tdfyvl0n@fr.dmarcian.com; fo=1; aspf=r
- DKIM Selectors Detected
- google, selector1, s1, s2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (google, selector1, s1, s2)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- openai
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- —
- Meta Description
- —
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width
- Generator Software
- —
1 technologies detected
Cloudflare
No mobile viewport meta tag
The page won't render correctly on phones without a viewport tag.
-3
Page has no <title>
Well-maintained sites always set a page title.
-3
Missing meta description
-2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 3 ms
- Payload Body Size
- 9.7 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
No findings.
AI Content Evaluation
88/100 — trusted. Long-established domain (19.7 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 43 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 172.64.154.211
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://openai.com/
- Redirect Hop Count
- 0 hops
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (3ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- C=US, O=Let's Encrypt, CN=YR1
- Subject Common Name (CN)
- *.edge.unified-199.api.openai.com
- Validity Period
- 5 days remaining (Expires: 2026-10-26T00:25:07Z)
- Subject Alternative Names (SANs)
- 32 domains protected
- Certificates Logged (CT)
- 100 certs recorded
Subject Alternative Names (Sample)
amgen-labeling-workbench.fde.openai.combzrcdn.openai.com18948ef4.sni.cloudflaressl.comscorpius.openai.comads.openai.comsonata.api.openai.comcreators.openai.comgo.openai.comalignment.openai.comrecruiting.openai.commath.forum.openai.comem.openai.comka3d0s888non270n82k.openai.commodel-spec.openai.comprivacy.openai.comgtm-innovation.api.openai.commtls.auth.openai.comspinningup.openai.comjuno.openai.comapi.presence.openai.com+12 more
Valid SSL / TLS certificate active
Issued by C=US, O=Let's Encrypt, CN=YR1, valid for 5 remaining days.
+10
Certificate expires soon (5 days)
-4
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Phone Numbers
- 37.5324 16.8707, 22.4978 37.8849, 25.9004 31.4156, 29.9213 20.998, 6.39227 31.0064, 13.699 30.7248
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
-4
No terms of service found
Reputable sites usually publish a terms of service.
-4
No contact page found
Reputable sites usually publish a contact page.
-4
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
Phone number published
+2
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://openai.com/sitemap.xml
- Disallow Rules Count
- 1 rule
View Raw robots.txt
User-agent: * Allow: / Disallow: /microsoft-for-startups/ Sitemap: https://openai.com/sitemap.xml
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
40
This scan
Sources Checked
18
Live security feeds
Scan Duration
2.59s
Ultra-fast
Last Scan
10/20/2026
Live timestamp
Overall Risk
Low Risk