# cnsqarrloggn.webflow.io — MALICIOUS

> cnsqarrloggn.webflow.io is active and flagged for phishing. Avoid interaction and report suspicious activity immediately to stay protected.

## Summary
PhishDestroy identifies cnsqarrloggn.webflow.io as a high-risk generic phishing domain, actively targeting unsuspecting users. Its classification is based on clear phishing indicators discovered during investigation.

The domain resolves to IP 104.18.36.248, and VirusTotal flags it by 18 out of 95 security vendors, confirming presence in multiple threat intelligence sources. This infrastructure aligns with common phishing hosting patterns.

Currently active, cnsqarrloggn.webflow.io demands immediate caution. Users should avoid engagement, and security teams are advised to block and monitor this domain to mitigate phishing risks effectively.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: Coinsquare® Login: Gateway to Digital Asset Exchange

## Domain Intelligence
- Registered: 2026-03-05 13:07:01
- Registrar: MarkMonitor, Inc.
- Country: US
- IP: 104.18.36.248
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: NS_NOT_FOUND
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 17 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Lionic", "MalwareURL", "Netcraft", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content
- Meta description: Effortlessly navigate the digital asset exchange with Coinsquare Login. Securely access accounts, trade assets, and shape your crypto portfolio.

### Page Text
Coinsquare® Login: Gateway to Digital Asset Exchange Coinsquare® Login: Gateway to Digital Asset Exchange

### External Scripts
- https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=64e51bb2fe52aaa6c0f9ee3a
- https://cdn.prod.website-files.com/64e51bb2fe52aaa6c0f9ee3a/js/webflow.24a563ff7.js

### External Links
- https://coinsquare.com/en-ca/

## Evidence
- Screenshot: https://i.ibb.co/s9fYGJfz/b9eb2c22641f.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/cnsqarrloggn.webflow.io
- Wayback Machine: https://web.archive.org/web/https://cnsqarrloggn.webflow.io
- PhishDestroy: https://phishdestroy.io/domain/cnsqarrloggn.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/cnsqarrloggn.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cnsqarrloggn.webflow.io/
Last updated: 2026-03-16