New Registrations

Claude phishing domains

Newly registered lookalikes - tracked daily

Claude phishing domains

Newly registered lookalikes - tracked daily

Tracked (7d)
14
New (24h)
1
vs avg
—
Website
claude.ai
About
AIAnthropic's AI assistant. Phishing aims at credential theft to drain Pro / Max subscription credits, exfiltrate conversation history from Projects, or hijack API keys tied to the billing account.
TLDs
.com (11) · .ltd (1) · .online (1)
Hosts
Amazon.com, Inc. (6) · Trellian Pty. Limited (1) · HOSTKEY B.V. (1)
Countries
United StatesUnited States (8) · TurkeyTurkey (1) · South AfricaSouth Africa (1)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-10-18 13:47 2026-10-18 13:47
https://claude-ai-promo.com
Screenshot of claude-ai-promo.com Details
2026-10-17 13:32 2026-10-17 13:32
https://milanthropic.com
Screenshot of milanthropic.com Details
2026-10-14 14:02 2026-10-14 14:02
https://philanthropic.ltd
Screenshot of philanthropic.ltd Details
2026-10-14 14:02 2026-10-14 14:02
https://peffersphilanthropic.com
Screenshot of peffersphilanthropic.com Details
2026-10-14 13:43 2026-10-14 13:43
https://docsanthropic.com
Screenshot of docsanthropic.com Details
2026-10-14 13:38 2026-10-14 13:38
https://anthropic-announcements.com
Screenshot of anthropic-announcements.com Details
2026-10-13 13:22 2026-10-13 13:22
https://app-claude-ai.online
Screenshot of app-claude-ai.online Details
2026-10-13 13:22 2026-10-13 13:22
https://app-claude-ai.com
Screenshot of app-claude-ai.com Details
2026-10-12 15:12 2026-10-12 15:12
https://santhropic.com
Screenshot of santhropic.com Details
2026-10-12 15:12 2026-10-12 15:12
https://preanthropic.com
Screenshot of preanthropic.com Details
2026-10-12 15:12 2026-10-12 15:12
https://postanthropic.com
Screenshot of postanthropic.com Details
2026-10-12 15:07 2026-10-12 15:07
https://mis-anthropic.com
Screenshot of mis-anthropic.com Details
2026-10-12 14:46 2026-10-12 14:46
https://enanthropic.life
Screenshot of enanthropic.life Details
2026-10-12 14:46 2026-10-12 14:46
https://enanthropic.com
Screenshot of enanthropic.com Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://claude-ai-promo.com
Screenshot of claude-ai-promo.com Details
https://milanthropic.com
Screenshot of milanthropic.com Details
https://philanthropic.ltd
Screenshot of philanthropic.ltd Details
https://peffersphilanthropic.…
Screenshot of peffersphilanthropic.com Details
https://docsanthropic.com
Screenshot of docsanthropic.com Details
https://anthropic-announcemen…
Screenshot of anthropic-announcements.com Details
https://app-claude-ai.online
Screenshot of app-claude-ai.online Details
https://app-claude-ai.com
Screenshot of app-claude-ai.com Details
https://santhropic.com
Screenshot of santhropic.com Details
https://preanthropic.com
Screenshot of preanthropic.com Details
https://postanthropic.com
Screenshot of postanthropic.com Details
https://mis-anthropic.com
Screenshot of mis-anthropic.com Details
https://enanthropic.life
Screenshot of enanthropic.life Details
https://enanthropic.com
Screenshot of enanthropic.com Details

AIHow to verify a real Claude URL

  • Legitimate Claude URLs always end in claude.ai (e.g. www.claude.ai, account.claude.ai). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Claude.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Claude has owned claude.ai for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open claude.ai from your browser bookmark or type the domain manually.
  • Real Claude pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.