claudettes[.]net

Analysis of claudettes.net indicates that the domain was registered on 10 June 2026 through CNOBIN INFORMATION TECHNOLOGY LIMITED and is currently hosted on IP address 188.114.96.3. The authoritative name servers are cheryl.ns.cloudflare.com and jacob.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. The domain is listed as active and continues to resolve to the same IP. Threat intelligence feeds have added the domain to at least one security blocklist, and PhishDestroy has explicitly flagged it as malicious.

VirusTotal scans show that 19 of 91 AV engines returned a positive detection, reinforcing the suspicion of malicious intent. No further public indicators such as SSL certificate details, HTTP response codes, or page titles have been released, leaving the exact phishing payload or targeted brand undefined. The limited visibility of the site’s content means that the specific lure (e.g., credential harvesting, account takeover) cannot be confirmed at this time. Defenders should treat claudettes.net as a high‑risk indicator: network firewalls, DNS filters, and endpoint protection solutions must block resolution and traffic to the domain and its associated IP.

Continuous monitoring of DNS queries for the Cloudflare name servers and the IP address is recommended to detect any pivot or re‑use of the infrastructure. Organizations should also update threat‑intelligence feeds with the domain’s identifiers and consider adding it to internal allow‑list exclusions only after thorough verification. The presence of multiple vendor detections and blocklist entries suggests that the domain is actively used in phishing campaigns, and prompt remediation is advised.