# ca-coinsquree-cdn--auths.webflow.io — MALICIOUS

> High-risk phishing site ca-coinsquree-cdn--auths.webflow.io targets users. Avoid entering credentials and report suspicious activity immediately.

## Summary
PhishDestroy identifies ca-coinsquree-cdn--auths.webflow.io as a high-risk phishing domain designed to steal sensitive user information. Such sites pose significant dangers by mimicking trusted services to trick users into revealing login credentials or personal data.

This phishing campaign operates by impersonating legitimate web services, likely related to cryptocurrency or financial platforms, as suggested by the domain name. It uses a Webflow hosting environment and resolves to IP 104.18.36.248. VirusTotal flags indicate this domain has been detected by multiple security vendors, confirming its malicious intent. Attackers exploit this to harvest data for fraud or identity theft.

If a user has visited this site, it is crucial to immediately change any passwords or credentials that might have been entered. Monitoring financial accounts for unusual activity and enabling multi-factor authentication is advised. Reporting the domain to cybersecurity platforms like PhishDestroy helps protect others from falling victim to this scam.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: Coinsquare | Login

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: REGISTRAR_NOT_FOUND
- IP: 104.18.36.248
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: NS_NOT_FOUND
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 17 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "CyRadar", "ESET", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Lionic", "Netcraft", "OpenPhish", "Sophos", "Trustwave", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content
- Meta description: Coinsquare login offers a secure, intuitive portal for managing your cryptocurrency portfolio. Access advanced trading tools, robust security measures, and real-time market insights to confidently navigate the crypto market today.

### Page Text
Coinsquare | Login

### External Scripts
- https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=67f8e210e071738edff5c205
- https://cdn.prod.website-files.com/67f8e210e071738edff5c205/js/webflow.751e0867.f68fe005672cde30.js

### External Links
- https://webflow.com?utm_campaign=brandjs
- https://safe-square.xyz/logi/

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc280-a040-7228-842a-bb57a7a5d6af.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/ca-coinsquree-cdn--auths.webflow.io
- Wayback Machine: https://web.archive.org/web/https://ca-coinsquree-cdn--auths.webflow.io
- PhishDestroy: https://phishdestroy.io/domain/ca-coinsquree-cdn--auths.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/ca-coinsquree-cdn--auths.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ca-coinsquree-cdn--auths.webflow.io/
Last updated: 2026-03-16