New Registrations

Klarna phishing domains

Newly registered lookalikes - tracked daily


Klarna phishing domains

Newly registered lookalikes - tracked daily


Tracked (7d)
15
New (24h)
5
vs avg
About
AIBuy-now-pay-later (BNPL) target. Lures impersonate 'payment due' or 'account locked' notices to harvest card data.
TLDs
.com (7) · .info (3) · .casino (1)
Countries
United StatesUnited States (7) · GermanyGermany (4) · The NetherlandsThe Netherlands (1)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) URL Screenshot Flags Details
2026-08-29 14:02 2026-08-29 14:02
https://portal-klarna.info
Screenshot of portal-klarna.info Details
2026-08-29 13:49 2026-08-29 13:49
https://klarnaonline.casino
Screenshot of klarnaonline.casino Details
2026-08-29 13:49 2026-08-29 13:49
https://klarnacasino.online
Screenshot of klarnacasino.online Details
2026-08-28 13:49 2026-08-28 13:49
https://klarnafinancing.com
Screenshot of klarnafinancing.com Details
2026-08-28 13:49 2026-08-28 13:49
https://klarnaedford.com
Screenshot of klarnaedford.com Details
2026-08-27 01:34 2026-08-27 01:34
https://klarnauthnl.com
Screenshot of klarnauthnl.com Details
2026-08-27 01:34 2026-08-27 01:34
https://klarnasup.com
Screenshot of klarnasup.com Details
2026-08-27 01:34 2026-08-27 01:34
https://klarnacasinosites.com
Screenshot of klarnacasinosites.com Details
2026-08-27 01:34 2026-08-27 01:34
https://klarna-auth-inlng.com
Screenshot of klarna-auth-inlng.com Details
2026-08-25 01:20 2026-08-25 01:20
https://klarnapp.shop
Screenshot of klarnapp.shop Details
2026-08-25 01:20 2026-08-25 01:20
https://klarnapp.org
Screenshot of klarnapp.org Details
2026-08-24 01:28 2026-08-24 01:28
https://klarnalogin.info
Screenshot of klarnalogin.info Details
2026-08-24 01:28 2026-08-24 01:28
https://klarnalogger.info
Screenshot of klarnalogger.info Details
2026-08-23 02:14 2026-08-23 02:14
https://klarnakonto.com
Screenshot of klarnakonto.com Details
2026-08-22 02:23 2026-08-22 02:23
https://klarna-aktualisierung.net
Screenshot of klarna-aktualisierung.net Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://portal-klarna.info
Screenshot of portal-klarna.info Details
https://klarnaonline.casino
Screenshot of klarnaonline.casino Details
https://klarnacasino.online
Screenshot of klarnacasino.online Details
https://klarnafinancing.com
Screenshot of klarnafinancing.com Details
https://klarnaedford.com
Screenshot of klarnaedford.com Details
https://klarnauthnl.com
Screenshot of klarnauthnl.com Details
https://klarnasup.com
Screenshot of klarnasup.com Details
https://klarnacasinosites.com
Screenshot of klarnacasinosites.com Details
https://klarna-auth-inlng.com
Screenshot of klarna-auth-inlng.com Details
https://klarnapp.shop
Screenshot of klarnapp.shop Details
https://klarnapp.org
Screenshot of klarnapp.org Details
https://klarnalogin.info
Screenshot of klarnalogin.info Details
https://klarnalogger.info
Screenshot of klarnalogger.info Details
https://klarnakonto.com
Screenshot of klarnakonto.com Details
https://klarna-aktualisierung…
Screenshot of klarna-aktualisierung.net Details

AIHow to verify a real Klarna URL

  • Legitimate Klarna URLs always end in klarna.com (e.g. www.klarna.com, account.klarna.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Klarna.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Klarna has owned klarna.com for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open klarna.com from your browser bookmark or type the domain manually.
  • Real Klarna pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.