eastcleopatra[.]com

Analysis indicates that eastcleopatra.com is an active phishing domain impersonating the ChatGPT brand. The domain was registered on July 1, 2025, through Global Domain Group LLC and remains operational as of July 12, 2026. It resolves to IP address 172.67.152.183 and is hosted behind Cloudflare infrastructure, which may obscure further network-level attribution. The site's page title, "الرئيسية - بوابة كليوباترا الشرق," does not explicitly reference ChatGPT, but known intelligence confirms the domain is targeting the ChatGPT brand, as documented in 23 threat intelligence pulses on AlienVault OTX. Technical indicators reveal the use of WordPress, MySQL, PHP, Yoast SEO, and Gravatar, suggesting a CMS-based phishing kit. The domain is flagged by one security vendor on VirusTotal and appears on two security blocklists, including PhishDestroy and BLP-Malware. A Gridinsoft trust score of 0/100 further supports its malicious classification. The SSL certificate is issued by Google Trust Services, which does not mitigate the phishing risk. Defenders should treat this domain as high-risk. Blocking at the DNS or network level is recommended, along with monitoring for related infrastructure (e.g., 172.67.152.183) in logs. Given the use of Cloudflare, additional scrutiny of related domains or IPs may be necessary to identify linked phishing campaigns. The exact content and functionality of the site remain unanalyzed, but the combination of brand impersonation, blocklist presence, and threat intelligence reporting confirms its malicious intent.