Scan report · 10 days agoPublic

claude-desktop.com

104.21.30.33AS13335 · US

Suspicious: the page presents itself as Anthropic and wears the brand's name in a host the brand does not own (claude-desktop.com)

Engine tags

Verdict

2 of 6 enginesMaliciousAutomated

Own this site?

What happened

Step by step, from what the scanner recorded.

Load 1.0 s · 2 requests

01 · Visitor opensclaude-desktop.com

02 · Redirected · 1 hopSame host, another address

03 · Page shown

Claude Desktop — Professional Guide to Local AI-Assisted Coding & Engineering Workflowsstyled as Anthropic · high

04 · OutcomeCredential phishingA login page wearing a brand it does not own.

Dangerous — confirmed threat

Automated

It presents itself as Anthropic while being hosted somewhere Anthropic does not own. It is listed on external threat-intelligence feeds. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first

SupportingBrand impersonation detected

Anthropic · high

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteHigh confidence: the host wears the brand's name and the page asks for an account name. There is no password box on it — that is the FIRST step of a two-step login, so the password is collected on a screen we did not reach. Judge it by the host and the form's sink.

Infrastructure

IP: 104.21.30.33CLOUDFLARENET - Cloudflare, Inc., US · AS13335US
Redirects: 0 hops · / → /

WHOIS

Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
Created: Sep 9, 2026
Expires: Sep 9, 2027
Nameservers: janet.ns.cloudflare.comkeaton.ns.cloudflare.com

27 malicious5 suspicious

Hashes & fingerprints

Page Hasha754f5478096ef8a8f0e7821cb7c431e9a7d3fe7ecbcb1642f4d7847fba31be3 DOM Hash3fb797b5bcf16c56fcb031eb5fbe3721c74be978f97f7f9e44ad3ce77fafe413 Screenshot pHash93523c3bc729e564

Page capture

Live

Title “Claude Desktop — Professional Guide to Local AI-Assisted Coding & Engineering Workflows” · brand shown: Anthropic (high)

Visit Site

Engines

6 · time to verdict