home-100290[.]square[.]site

The domain home-100290.square.site is associated with a generic phishing operation that has been taken offline as of the report date, July 24, 2026. Infrastructure analysis shows that the domain resolves to IP address 74.115.51.4, which belongs to AS27647 Weebly, Inc. and is geolocated in the United States. Registration details indicate the domain was created on February 5, 2019 and was registered through MarkMonitor, Inc., a registrar commonly used for legitimate enterprises, which suggests the registration may have been deliberately hidden behind a reputable registrar to lend credibility. The site presented a 404 HTTP status when queried, and its only observable page title was "Home | Home," offering no functional content for analysis.

The TLS certificate is issued by Let’s Encrypt (E8), providing encrypted transport but not implying trustworthiness. Detected technologies include Amazon Web Services, HSTS enforcement, and Cloudflare, indicating the use of a cloud-based delivery network, which can obscure the true origin of malicious payloads. Virustotal scans flagged the domain in 10 of 91 security vendor engines, reinforcing the notion of malicious intent, while the domain appears on one external blocklist and is specifically blocked by PhishDestroy. Nameservers are spread across four AWS DNS endpoints (ns-1248.awsdns-28.org, ns-1816.awsdns-35.co.uk, ns-311.awsdns-38.com, ns-810.awsdns).

Although the site currently returns a 404 and is offline, the historical evidence points to a deliberately hosted phishing landing page that leveraged reputable infrastructure to avoid easy detection. Defenders should continue to block the domain and its associated IP address at perimeter defenses, monitor DNS queries for the listed nameservers, and ensure that any inbound traffic to this endpoint is denied.