squidrouter-launch[.]live
Analysis of squidrouter-launch.live indicates a newly registered phishing infrastructure. The domain was created on August 03, 2026 and is currently active, resolving to the IP address 104.21.90.215. The hosting provider is Cloudflare, Inc., with the IP geolocated to Canada. DNS resolution is handled by Cloudflare nameservers jo.ns.cloudflare.com and lex.ns.cloudflare.com, suggesting the attacker is leveraging Cloudflare's DNS and CDN services to obscure origin.
The registrar listed for the domain is PDR Ltd. d/b/a PublicDomainRegistry.com. The domain has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, confirming that threat intelligence sources have identified it as malicious. VirusTotal scanned the domain with 91 antivirus and URL‑reputation vendors; none reported a detection, but the lack of a positive result does not constitute a safety assurance, especially given the corroborating blocklist entries and the phishing classification. No public Safe Browsing, OTX, SSL, HTTP status, or page‑title information is available at this time, leaving the exact content of the landing page unverified.
Defenders should treat the domain as hostile: block DNS resolution to squidrouter-launch.live at the recursive resolver level, add the IP 104.21.90.215 to outbound deny lists, and monitor for any outbound connections to the address. Continuous re‑scanning on VirusTotal and other sandboxes is advised, as the site may evolve or begin delivering payloads. Given the recent creation date and active status, the threat remains under investigation, and organizations should maintain heightened vigilance for phishing attempts that may reference this domain.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% confidenceHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidenceVirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of squidrouter-launch.live · checked Aug 5, 2026
Evidence & External Reports
PD-20260805-ABC2B8 Recipient: abuse@publicdomainregistry.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive