square-maniaq[.]live

Analysis of the domain square-maniaq.live indicates it is actively involved in a high-risk phishing campaign targeting payment or financial services. The domain was registered on May 6, 2026, through GNAME.COM PTE. LTD., a registrar frequently associated with newly created suspicious domains. Infrastructure analysis reveals the domain resolves to the IP address 65.98.5.17, which has been linked to other fraudulent activities in recent months. At the time of this report, Google Safe Browsing has classified the site as engaging in social engineering, a designation typically applied to pages designed to deceive users into divulging sensitive information.

Detection metrics further support the malicious classification of this domain. PhishDestroy has blocked access to square-maniaq.live, and the domain appears on at least one additional security blocklist. A scan conducted by VirusTotal on an unspecified date shows that 18 out of 91 security vendors flag the domain as malicious, though the specific nature of the threat—whether credential harvesting, malware distribution, or another form of fraud—remains unconfirmed due to limited public indicators. No evidence from open-source threat intelligence platforms or SSL certificate analysis was available to clarify the targeted brand or phishing kit in use. Defenders should treat this domain as an active threat.

Network-level blocking is recommended for the domain and its resolving IP address. Security teams are advised to monitor for connections to 65.98.5.17 and review logs for any interactions with square-maniaq.live, particularly in environments where financial transactions or user authentication occur. Given the domain's recent registration and detection by multiple security vendors, further investigation into its infrastructure and associated campaigns is warranted. No legitimate use case for this domain has been identified as of July 29, 2026.