New Registrations

Claude phishing domains

Newly registered lookalikes - tracked daily

Claude phishing domains

Newly registered lookalikes - tracked daily

Website
claude.ai
About
AIAnthropic's AI assistant. Phishing aims at credential theft to drain Pro / Max subscription credits, exfiltrate conversation history from Projects, or hijack API keys tied to the billing account.
TLDs
.cyou (1)
Hosts
Cloudflare, Inc. (1)
Countries
United StatesUnited States (1)
Historical record. phishunt is not tracking any newly-registered Claude lookalike domain right now; the 1 entry below is from the 365-day archive (sites taken down, cleaned up, or otherwise inactive). Use them for retrospective analysis, not as a current threat-feed signal.
First seen URL IP Cert Detail
2026-07-26 https://claude-ai.cyou 172.67.143.135 - View →

AIHow to verify a real Claude URL

  • Legitimate Claude URLs always end in claude.ai (e.g. www.claude.ai, account.claude.ai). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Claude.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Claude has owned claude.ai for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open claude.ai from your browser bookmark or type the domain manually.
  • Real Claude pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.