coinsquuare-loginx[.]webflow[.]io

The domain coinsquuare-loginx.webflow.io is assessed at an elevated risk level due to its specific threat type of fake login. This domain poses a significant threat to users attempting to log into what they believe is the legitimate Coinsquare login page, potentially leading to the theft of sensitive credentials and financial information.

Infrastructure analysis reveals that the domain resolves to the IP address 104.18.36.248, located in the United States and associated with AS13335 Cloudflare, Inc. The domain was registered through NameCheap, Inc. on February 21, 2026. According to VirusTotal, 16 out of 95 security vendors flag this domain as malicious. The SSL certificate is issued by Google Trust Services / WE1, which might lend a false sense of security to unsuspecting users. The domain appears on one known security blocklist, specifically PhishDestroy, and is currently offline.

To mitigate the risks associated with this fake login domain, users are advised to verify the URL of the login page before entering any credentials. Always ensure that the domain is the official Coinsquare website, and look for HTTPS in the URL. Organizations should update their security policies to include this domain in their blocklists and educate employees about the signs of phishing attempts. Additionally, implementing multi-factor authentication (MFA) can significantly reduce the likelihood of successful credential theft.