sso-coinsquare-cdn[.]weebly[.]com

This domain, sso-coinsquare-cdn.weebly.com, is actively hosting a credential phishing site targeting users of the Coinsquare platform, as indicated by the page title 'Coinsquare® - Login | Sign In to Your Account'. Analysis indicates the domain was registered through MarkMonitor, Inc. and is currently resolving to the IP address 74.115.51.8, located in the US and associated with Weebly, Inc. infrastructure. The domain has been flagged by 14 of 91 security vendors on VirusTotal, and it appears on at least one security blocklist, suggesting a high-risk classification. Infrastructure analysis reveals the use of Weebly's hosting platform, Amazon Web Services nameservers (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, ns-646.awsdns), and technologies including MySQL, PHP, jQuery, Google Analytics, and Cloudflare. The SSL certificate is issued by Let's Encrypt (YE1), which is consistent with legitimate and malicious sites alike. The domain was created on March 29, 2006, but this does not correlate with the current malicious activity, as the phishing content appears to be a recent deployment. Defenders should note that the site remains active as of July 12, 2026, with an HTTP status of 200, indicating it is accessible and operational. The scam type is explicitly classified as credential phishing, and the target brand is Coinsquare, based on the page title. No further details about the phishing kit or specific tactics (e.g., form fields, redirection chains) are available from the provided data. Immediate action is recommended to block the domain and associated IP address (74.115.51.8) at the network level, and to monitor for related indicators of compromise, such as user reports of credential theft or unusual login attempts from the resolved IP.