claudecode[.]jp

Analysis of the domain claudecode.jp indicates that it is currently active and associated with a generic phishing campaign. The domain appears on a single security blocklist, confirming that at least one external threat‑intelligence source has flagged it for malicious use. A VirusTotal scan was performed using 91 vendor engines; to date none of those engines have generated a detection for the domain, which reflects the current state of automated analysis but does not constitute a safety assurance.

The domain is also listed as blocked by PhishDestroy, a dedicated phishing mitigation service, adding further evidence of its malicious intent. No publicly available data on registrar details, IP address allocation, ASN, or SSL certificate status was provided, so the hosting environment and certificate legitimacy remain uncertain. Likewise, Safe Browsing, Open Threat Exchange, and other reputation services have not been cited in the available intelligence, leaving those vectors unverified.

Because the domain is actively flagged by a blocklist and by PhishDestroy, defenders should treat any traffic to or from claudecode.jp as high‑risk until a thorough, site‑specific investigation can be completed. Recommended actions include adding the domain to corporate web‑filter deny lists, monitoring outbound DNS queries for lookups of the domain, and inspecting any email links that reference it for potential credential‑harvesting attempts. Continuous re‑evaluation is advised as additional intelligence, such as new blocklist entries or vendor detections, may emerge.