claude-chat[.]icu

The domain www.claude-chat.icu was registered on July 22, 2026 through GLOBAL ASSET DOMAINS INC and is currently resolved to the IP address 104.21.79.141. Both authoritative name servers, arushi.ns.cloudflare.com and kevin.ns.cloudflare.com, are operated by Cloudflare, indicating that the domain is hosted behind Cloudflare’s reverse‑proxy infrastructure. VirusTotal has recorded two positive detections out of ninety‑one submitted security scanners, confirming that at least a minority of reputable engines have identified malicious activity associated with this host.

The domain is listed on the PhishDestroy blocklist and appears on a single additional security blocklist, reinforcing its classification as a high‑risk phishing resource. Its status remains active as of the report date, July 27, 2026. No public information about the site’s page title, SSL certificate details, or HTTP response codes has been disclosed, and the specific brand or service being spoofed has not been identified in the available intelligence.

Analysts should treat the domain as a confirmed phishing vector and enforce immediate blocking at network perimeter and endpoint filters. Continuous monitoring of the IP address 104.21.79.141 for any changes in reputation, as well as periodic re‑scanning of the domain in sandbox environments, is advised to capture any evolution in payload or tactics. Organizations using URL filtering should add www.claude-chat.icu to deny lists and ensure that any outbound traffic to the associated Cloudflare edge nodes is inspected for anomalous behavior.