suite-app-square[.]pages[.]dev

This domain is flagged as a phishing portal targeting users of Square payment services, a platform commonly used for financial transactions and merchant processing. Analysis indicates the domain is designed to mimic legitimate Square login pages, likely harvesting credentials, payment details, or other sensitive financial data from unsuspecting victims. The infrastructure is hosted behind Cloudflare, a common tactic to obscure malicious activity and evade detection. Infrastructure analysis reveals the domain currently has zero detections on VirusTotal (0/95 engines), suggesting it remains undetected by most security vendors. It resolves to the IP address 172.66.45.11, registered through Cloudflare, Inc., and uses an SSL certificate issued by Google Trust Services. The domain's registration details are obscured by Cloudflare's privacy services, and no historical blocklist records exist at this time. The lack of prior detections increases the likelihood of successful phishing attempts against unprotected users. Users who have visited suite-app-square.pages.dev or entered credentials on this domain should immediately revoke any exposed passwords, enable multi-factor authentication on associated accounts, and monitor for unauthorized transactions. Financial institutions should be notified if payment details were submitted. Network administrators are advised to block the domain and its resolving IP (172.66.45.11) at the perimeter to prevent further access. Suspicious activity should be reported to relevant security teams for further analysis and containment.