Sure is third party website when the url ends with .square-enix.com. It's only a subdomain...
Being skeptical is one thing, claiming that its a scam is another. There is nothing wrong with asking in such cases indeed. But jumping to conclusion without any evidence is just wrong :s