squidrouter-launch[.]live

Analysis of squidrouter-launch.live indicates a newly registered phishing infrastructure. The domain was created on August 03, 2026 and is currently active, resolving to the IP address 104.21.90.215. The hosting provider is Cloudflare, Inc., with the IP geolocated to Canada. DNS resolution is handled by Cloudflare nameservers jo.ns.cloudflare.com and lex.ns.cloudflare.com, suggesting the attacker is leveraging Cloudflare's DNS and CDN services to obscure origin.

The registrar listed for the domain is PDR Ltd. d/b/a PublicDomainRegistry.com. The domain has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, confirming that threat intelligence sources have identified it as malicious. VirusTotal scanned the domain with 91 antivirus and URL‑reputation vendors; none reported a detection, but the lack of a positive result does not constitute a safety assurance, especially given the corroborating blocklist entries and the phishing classification. No public Safe Browsing, OTX, SSL, HTTP status, or page‑title information is available at this time, leaving the exact content of the landing page unverified.

Defenders should treat the domain as hostile: block DNS resolution to squidrouter-launch.live at the recursive resolver level, add the IP 104.21.90.215 to outbound deny lists, and monitor for any outbound connections to the address. Continuous re‑scanning on VirusTotal and other sandboxes is advised, as the site may evolve or begin delivering payloads. Given the recent creation date and active status, the threat remains under investigation, and organizations should maintain heightened vigilance for phishing attempts that may reference this domain.