# coinsquuuareloggin.webflow.io — MALICIOUS

> coinsquuuareloggin.webflow.io is linked to medium-risk phishing. Explore its threat details and mitigation steps by PhishDestroy.

## Summary
PhishDestroy identifies coinsquuuareloggin.webflow.io as an active phishing domain targeting generic credentials theft. Classified with a medium risk level, this domain is designed to deceive users by mimicking legitimate login interfaces, potentially compromising sensitive information.

The domain resolves to IP address 104.18.36.248 and has been flagged by 8 out of 95 security vendors on VirusTotal, indicating moderate detection across antivirus tools. Hosted on the Webflow platform, coinsquuuareloggin.webflow.io leverages common web infrastructure typically used for legitimate sites, complicating detection efforts. This tactic, combined with the domain’s naming convention, suggests an attempt to impersonate a cryptocurrency-related service.

Currently active, this domain poses a tangible threat to users who may be tricked into submitting personal or financial data. PhishDestroy recommends blocking access to this domain, educating users about such phishing schemes, and maintaining updated anti-phishing defenses. Continuous monitoring is essential to identify any changes in domain behavior or infrastructure associated with this phishing campaign.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: Coinsquare Login - Your Gateway to Digital Currency

## Domain Intelligence
- Registered: 2026-03-05 13:07:01
- Registrar: REGISTRAR_NOT_FOUND
- IP: 104.18.36.248
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: NS_NOT_FOUND
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "ESET", "Emsisoft", "Forcepoint ThreatSeeker", "G-Data", "Gridinsoft", "Kaspersky", "Lionic", "Netcraft", "OpenPhish", "Sophos", "Trustwave", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
Coinsquare Login - Your Gateway to Digital Currency Coinsquare Login

### External Scripts
- https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=64d202a8d5be49b3874b7303
- https://cdn.prod.website-files.com/64d202a8d5be49b3874b7303/js/webflow.24a563ff7.js

### External Links
- https://konsqure.keplr-wallet.xyz/logi/

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbe15-b9c5-73e6-b5e4-710d55d02246.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/coinsquuuareloggin.webflow.io
- Wayback Machine: https://web.archive.org/web/https://coinsquuuareloggin.webflow.io
- PhishDestroy: https://phishdestroy.io/domain/coinsquuuareloggin.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/coinsquuuareloggin.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinsquuuareloggin.webflow.io/
Last updated: 2026-03-16