[PeterStuer]

Blaming this on Claude is a bit of a reach. The user very carefully goading Claude seems to be key here.

Also interesting buried a bit: user creats a website. Cloudflare immediatly erects a toll gate on it, without even asking.

[strken]

The user doesn't need to carefully goad Claude, they just need to send it to an attacker's website. The attacker is the one creating the link traversal merry-go-round.