gpteurax[.]app

The domain gpteurax.app was registered on February 21, 2026 and resolves to the IPv4 address 188.114.97.3, which is owned by Cloudflare, Inc. (AS13335) and originates from the United States. The site currently presents a page title of "Bit GPT" but offers no SSL certificate, indicating that it serves content over plain HTTP only. Google Safe Browsing has classified the URL as a social engineering threat, and VirusTotal records show that 15 out of 95 security vendors have flagged the domain, confirming malicious intent.

The domain appears on three public blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its reputation as a high‑risk phishing resource. Although the site has been taken offline, the observable infrastructure—including the Cloudflare edge IP, lack of TLS, and the "Bit GPT" title—remains a reliable indicator for detection systems. Uncertainty remains regarding the exact content and credential‑harvesting mechanisms that were hosted, as the site is no longer reachable and no page‑level artifacts have been captured.

Defenders should therefore implement DNS‑level blocking for gpteurax.app, add the domain to existing URL filtering policies, and monitor the associated IP address for any future domains that may surface using the same Cloudflare edge. Correlation of the "Bit GPT" title with other observed phishing attempts could improve heuristic detection, while continuous threat‑intel feeds should be consulted for any resurgence of the domain or related indicators.