# securee-coinsquare.webflow.io — SUSPICIOUS

> PhishDestroy identifies securee-coinsquare.webflow.io as a live credential phishing site mimicking Coinsquare. Hosted on 104.18.36.

## Summary
PhishDestroy has flagged securee-coinsquare.webflow.io as an active credential phishing site designed to impersonate the legitimate cryptocurrency exchange Coinsquare. This fraudulent domain uses a Webflow subdomain to host a realistic-looking login portal with the intent of harvesting user credentials. The attacker’s goal is to trick victims into entering their Coinsquare account details, which are then captured and used to steal funds or personal information.  This domain resolves to IP address 104.18.36.248 and currently shows 0 out of 95 detections on VirusTotal, meaning it has not yet been widely blocked by antivirus engines. It has already been listed on 2 security blocklists including OpenPhish and OISD. The SSL certificate is issued by Google Trust Services, a trusted provider, which adds a veneer of legitimacy but does not guarantee safety. The domain is hosted on the Webflow platform and leverages its infrastructure to create a convincing replica of a real exchange login interface.  If you visited securee-coinsquare.webflow.io or entered any login credentials, assume your data has been compromised. Immediately change your Coinsquare password using a trusted, non-infected device and enable two-factor authentication. Scan your device with updated antivirus software to check for malware. Report the incident to Coinsquare support and monitor your account for unauthorized transactions. Avoid clicking links in emails or messages claiming to be from Coinsquare—always access exchanges directly through official URLs or bookmarks

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 104.18.36.248

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["OpenPhish", "OISD"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/securee-coinsquare.webflow.io
- PhishDestroy: https://phishdestroy.io/domain/securee-coinsquare.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/securee-coinsquare.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/securee-coinsquare.webflow.io/
Last updated: 2026-04-04