login-coinsquarre[.]webflow[.]io

PhishDestroy identifies login-coinsquarre.webflow.io as an active domain posing an elevated risk due to its role as a credential phishing site targeting cryptocurrency users. This domain impersonates legitimate crypto login interfaces to deceive victims into disclosing sensitive credentials, which could lead to unauthorized access and financial theft.

Technical analysis reveals that login-coinsquarre.webflow.io is flagged by 7 out of 95 security vendors on VirusTotal, indicating a notable detection rate by antivirus and threat intelligence tools. The domain resolves to the IP address 172.64.151.8 and uses an SSL certificate issued by Google Trust Services, lending it an appearance of legitimacy to unsuspecting users. Although detailed registrar and creation date information is unavailable, the domain’s presence in multiple blocklists alongside its SSL certificate usage shows a strategic attempt to bypass basic security filters.

To mitigate risks posed by this credential phishing threat, users should avoid entering any credentials on login-coinsquarre.webflow.io and closely verify URLs before submitting sensitive information. Employing multi-factor authentication on crypto accounts and using updated endpoint protection can further reduce exposure. It is strongly recommended to cross-verify suspicious sites on platforms like PhishDestroy before engagement to prevent falling victim to crypto credential theft.