admin-care-centeranetseurereviewaccounttoday[.]square[.]site

The domain admin-care-centeranetseurereviewaccounttoday.square.site is actively used in a credential phishing campaign as of the report date 30 July 2026. Technical analysis shows the hostname resolves to the IPv4 address 74.115.51.5, and its authoritative name server information is unavailable (NS_NOT_FOUND). The domain is listed on two commercial blocklists, PhishDestroy and OpenPhish, confirming that at least two independent threat intel feeds have identified it as malicious. VirusTotal scans have returned a detection ratio of 15 out of 91 security vendors, indicating a moderate to high consensus among AV and URL filtering products that the site hosts phishing content.

Registration data ties the domain to Square, Inc., the legitimate provider of the square.site TLD, suggesting the attacker leveraged a trusted registrar to obtain the namespace. No additional evidence such as page title, SSL certificate details, or HTTP response codes is currently available, leaving the precise content and lure mechanisms undocumented. The lack of resolvable name servers may reflect rapid takedown attempts or intentional obfuscation.

Defenders should immediately block DNS resolutions to 74.115.51.5 for this host, add the domain to local deny lists, and monitor network traffic for attempted connections to the IP. Email gateways should enforce URL reputation checks that include PhishDestroy and OpenPhish feeds, and endpoint security solutions should be updated to reflect the 15 vendor detections reported by VirusTotal. Ongoing observation is advised to capture any future changes in hosting, page content, or additional blocklist submissions.