Security Scan Report: cladesktop-apps.com

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Confirmed malware distribution page impersonating Anthropic's Claude. High-precision YARA detects a fake installer using WebAssembly, and threat intelligence flags the domain for OSX Atomic malware. Do not download.

Risk Factors (5)
Brand impersonation of Anthropic's Claude on a mismatched domain
Primary domain flagged for OSX Atomic malware by two independent feeds
High-severity YARA rule for ClickFix WASM sealed install command kit
Fake desktop-app download page with obfuscated WebAssembly installer
HTML content copied from a legitimate Claude download page to lend credibility
Domain age information unavailable

Details

Page Title

Download Claude | Claude by Anthropic

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'cladesktop-apps.com' is registered. The registrable portion 'cladesktop-apps' spans 15 characters holding four vowels versus 10 consonants, plus 1 hyphen. Tokenizing the label suggests four words: c, la, desktop, apps. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cladesktop-apps.com/

Page Load Overview

2.20s
Total Load Time
500 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:17,691 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software95% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
95%
documentation technical
77%
education learning
62%
government public service
52%
healthcare medical
45%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.160.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
252.222.232.144Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2104.18.161.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
125--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CED4E7E0A2643271810787C9966F733471A7A0EAFB058598FAFC47D47BC9DD89CA8DC4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Fxw8WjICrNB1uK/OjXPc7FE8rI9lXkd+j29ZzS3xF/:k8WjIpjXPc7FFrclXkdtZmhF/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:639919:OAUDUwVTsAAwoAE0gBmCYCo5AAgKBAKNoS4oAdQDwRIRPTSKEGhzCXPRknQgS6xOEMMcCZUVwDAoDiAso2GBaMADKEADBMAU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bcc7c3c7bfafffff
Perceptual Hash:b362ccceda73224c
Difference Hash:49060ed8725ab414
Wavelet Hash:0000c3c31f0bffff
Color Hash:#79d2b5

Other Hashes

Crop Resistant:49060ed8725ab414

Scan History

Scan history not available

Unable to load historical scan data