New Registrations
Claude phishing domains
Newly registered lookalikes - tracked daily
Claude phishing domains
Newly registered lookalikes - tracked daily
Tracked (7d)
25
New (24h)
5
vs avg
—
Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.
| Last check (UTC) | First seen (UTC) ▾ | URL | Screenshot | Flags | Details |
|---|---|---|---|---|---|
| 2026-06-21 00:47 | 2026-06-21 00:47 | ![]() |
Details | ||
| 2026-06-21 00:47 | 2026-06-21 00:47 | ![]() |
Details | ||
| 2026-06-21 00:41 | 2026-06-21 00:41 | ![]() |
Details | ||
| 2026-06-21 00:40 | 2026-06-21 00:40 | ![]() |
Details | ||
| 2026-06-20 00:54 | 2026-06-20 00:54 | ![]() |
Details | ||
| 2026-06-19 03:15 | 2026-06-19 03:15 | ![]() |
Details | ||
| 2026-06-19 01:22 | 2026-06-19 01:22 | ![]() |
Details | ||
| 2026-06-19 01:04 | 2026-06-19 01:04 | ![]() |
Details | ||
| 2026-06-19 00:58 | 2026-06-19 00:58 | ![]() |
Details | ||
| 2026-06-19 00:58 | 2026-06-19 00:58 | ![]() |
Details | ||
| 2026-06-19 00:57 | 2026-06-19 00:57 | ![]() |
Details | ||
| 2026-06-19 00:57 | 2026-06-19 00:57 | ![]() |
Details | ||
| 2026-06-18 02:30 | 2026-06-18 02:30 | ![]() |
Details | ||
| 2026-06-18 02:21 | 2026-06-18 02:21 | ![]() |
Details | ||
| 2026-06-18 01:05 | 2026-06-18 01:05 | ![]() |
Details | ||
| 2026-06-18 01:05 | 2026-06-18 01:05 | ![]() |
Details | ||
| 2026-06-18 01:05 | 2026-06-18 01:05 | ![]() |
Details | ||
| 2026-06-17 01:50 | 2026-06-17 01:50 | ![]() |
Details | ||
| 2026-06-17 01:08 | 2026-06-17 01:08 | ![]() |
Details | ||
| 2026-06-17 00:51 | 2026-06-17 00:51 | ![]() |
Details | ||
| 2026-06-16 01:11 | 2026-06-16 01:11 | ![]() |
Details | ||
| 2026-06-15 02:50 | 2026-06-15 02:50 | ![]() |
Details | ||
| 2026-06-14 02:56 | 2026-06-14 02:56 | ![]() |
Details | ||
| 2026-06-14 02:51 | 2026-06-14 02:51 | ![]() |
Details | ||
| 2026-06-14 00:46 | 2026-06-14 00:46 | ![]() |
Details |
Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.
| URL | Screenshot | Details |
|---|---|---|
| https://anthropic-ltbt.com
|
![]() |
Details |
| https://anthropic-com.shop
|
![]() |
Details |
| https://2xshortanthropic.com
|
![]() |
Details |
| https://2xlonganthropic.com
|
![]() |
Details |
| https://casuistriestherianthr…
|
![]() |
Details |
| https://next-anthropic.com
|
![]() |
Details |
| https://claude-aitiyu.com
|
![]() |
Details |
| https://betancourtphilanthrop…
|
![]() |
Details |
| https://anthropic.london
|
![]() |
Details |
| https://anthropic-stock.com
|
![]() |
Details |
| https://anthropic-next.com
|
![]() |
Details |
| https://anthropic-mx.vip
|
![]() |
Details |
| https://miss-anthropic.com
|
![]() |
Details |
| https://lisathorsen-anthropic…
|
![]() |
Details |
| https://anthropic.rent
|
![]() |
Details |
| https://anthropic-skilljar.com
|
![]() |
Details |
| https://anthropic-online.com
|
![]() |
Details |
| https://unmissableanthropic.c…
|
![]() |
Details |
| https://fuckyouanthropic.com
|
![]() |
Details |
| https://evilanthropic.com
|
![]() |
Details |
| https://getmisanthropic.xyz
|
![]() |
Details |
| https://philanthropic.dev
|
![]() |
Details |
| https://pananthropic.com
|
![]() |
Details |
| https://nwphilanthropic.com
|
![]() |
Details |
| https://anthropic-caveman.com
|
![]() |
Details |
AIHow to verify a real Claude URL
- Legitimate Claude URLs always end in
claude.ai(e.g.www.claude.ai,account.claude.ai). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like.xyz/.top/.vip— is not Claude. - The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Claude has owned
claude.aifor years; brand-new look-alikes are almost never legitimate. - If you got the link from email, SMS, or social media, do not click it. Open
claude.aifrom your browser bookmark or type the domain manually. - Real Claude pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.


















