claudemac[.]netlify[.]app

PhishDestroy identifies claudemac.netlify.app as an active phishing domain impersonating the legitimate service ClaudeMac. The site uses a Netlify-hosted landing page designed to harvest user credentials under the guise of a login portal. No known drainer kit signatures or advanced obfuscation techniques have been observed at this time, suggesting a basic but effective credential harvesting operation targeting users expecting to access ClaudeMac services.

Technical indicators confirm the following: the domain resolves to IP 35.157.26.135, carries a valid SSL certificate issued by DigiCert Inc, and is registered through Netlify’s platform. VirusTotal currently shows 0 detections out of 95 engines, indicating low immediate detection coverage. No public blocklist entries have been recorded, and the domain’s registration details remain unverified due to Netlify’s privacy masking. The site does not appear on Google Safe Browsing (GSB) lists as of the latest scan.

The domain remains active and under active investigation. Netlify has been notified via abuse channels. Users are strongly advised not to interact with claudemac.netlify.app and to verify any login prompts by visiting the official ClaudeMac website directly. Remaining risk is assessed as moderate due to active status, lack of detection, and potential for credential theft. Immediate blocking at network and endpoint levels is recommended for organizations handling sensitive data.