New Registrations

Claude phishing domains

Newly registered lookalikes - tracked daily


Claude phishing domains

Newly registered lookalikes - tracked daily


Tracked (7d)
14
New (24h)
0
vs avg
Website
claude.ai
About
AIAnthropic's AI assistant. Phishing aims at credential theft to drain Pro / Max subscription credits, exfiltrate conversation history from Projects, or hijack API keys tied to the billing account.
TLDs
.com (11) · .help (2) · .space (1)
Countries
United StatesUnited States (9) · The NetherlandsThe Netherlands (1) · PolandPoland (1)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) URL Screenshot Flags Details
2026-08-18 01:05 2026-08-18 01:05
https://colonyphilanthropic.com
Screenshot of colonyphilanthropic.com Details
2026-08-18 00:55 2026-08-18 00:55
https://anthropic-nordic.com
Screenshot of anthropic-nordic.com Details
2026-08-18 00:54 2026-08-18 00:54
https://anthropic-europa.com
Screenshot of anthropic-europa.com Details
2026-08-18 00:54 2026-08-18 00:54
https://anthropic-datacenter.com
Screenshot of anthropic-datacenter.com Details
2026-08-16 01:07 2026-08-16 01:07
https://anthropic-workshop.com
Screenshot of anthropic-workshop.com Details
2026-08-15 02:36 2026-08-15 02:36
https://planthropic.com
Screenshot of planthropic.com Details
2026-08-15 01:31 2026-08-15 01:31
https://claude-ai.help
Screenshot of claude-ai.help Details
2026-08-15 01:30 2026-08-15 01:30
https://claude-ai-watermark.com
Screenshot of claude-ai-watermark.com Details
2026-08-15 01:13 2026-08-15 01:13
https://anthropic-team.com
Screenshot of anthropic-team.com Details
2026-08-15 01:13 2026-08-15 01:13
https://anthropic-support.com
Screenshot of anthropic-support.com Details
2026-08-14 01:49 2026-08-14 01:49
https://fuckanthropic.space
Screenshot of fuckanthropic.space Details
2026-08-14 01:26 2026-08-14 01:26
https://claude-aiads.com
Screenshot of claude-aiads.com Details
2026-08-14 01:09 2026-08-14 01:09
https://anthropic-dns.com
Screenshot of anthropic-dns.com Details
2026-08-13 01:08 2026-08-13 01:08
https://api-anthropic.help
Screenshot of api-anthropic.help Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://colonyphilanthropic.c…
Screenshot of colonyphilanthropic.com Details
https://anthropic-nordic.com
Screenshot of anthropic-nordic.com Details
https://anthropic-europa.com
Screenshot of anthropic-europa.com Details
https://anthropic-datacenter.…
Screenshot of anthropic-datacenter.com Details
https://anthropic-workshop.com
Screenshot of anthropic-workshop.com Details
https://planthropic.com
Screenshot of planthropic.com Details
https://claude-ai.help
Screenshot of claude-ai.help Details
https://claude-ai-watermark.c…
Screenshot of claude-ai-watermark.com Details
https://anthropic-team.com
Screenshot of anthropic-team.com Details
https://anthropic-support.com
Screenshot of anthropic-support.com Details
https://fuckanthropic.space
Screenshot of fuckanthropic.space Details
https://claude-aiads.com
Screenshot of claude-aiads.com Details
https://anthropic-dns.com
Screenshot of anthropic-dns.com Details
https://api-anthropic.help
Screenshot of api-anthropic.help Details

AIHow to verify a real Claude URL

  • Legitimate Claude URLs always end in claude.ai (e.g. www.claude.ai, account.claude.ai). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Claude.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Claude has owned claude.ai for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open claude.ai from your browser bookmark or type the domain manually.
  • Real Claude pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.