chatqpt.app
Appeared in the .app zone on Monday, November 9, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name chatqpt.app is a one-letter typosquat of ChatGPT (q for g) and is not an OpenAI property. Its content is hidden behind a genuine Cloudflare Access email-code gate, which is real Cloudflare and not impersonation, so no visible page is deceiving visitors yet and this is a brand-squat rather than confirmed phishing.
Domain chatqpt.app is a typosquat of ChatGPT (OpenAI's product). It redirects to a Cloudflare Access login page titled 'Sign in · Cloudflare Access' but displaying 'chatqpt.app' and 'Log in to Portal', creating the false impression of a ChatGPT/OpenAI login. The page captures email credentials via a form posting to chatqpt.cloudflareaccess.com. This is classic phishing: typosquatted domain + credential-harvesting form + deceptive branding mixing Cloudflare's infrastructure with OpenAI brand sign
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Monday, November 9, 2026
Same data as JSON: /api/zone/domain/chatqpt.app. This page is not indexed by search engines and does not link to the site it describes.