coensqureulogin[.]webflow[.]io

The domain coensqureulogin.webflow.io was created on 2026-02-05 and is currently resolved to the IP address 172.64.151.8, which belongs to a network located in Canada and is protected by a content delivery network. The site presents a page title that explicitly references the legitimate service Coinsquare, indicating a credential phishing campaign targeting users of that platform. Reputation services assign extremely low trust scores (Scamadviser 1/100, Gridinsoft 0/100) and the domain appears on one security blocklist, having been blocked by an anti‑phishing feed. VirusTotal analysis shows that sixteen of ninety‑one scanners flagged the domain as malicious. The SSL certificate is issued by a recognized certificate authority, providing transport encryption but not mitigating the phishing risk. Infrastructure analysis reveals the use of a modern web stack including HTTP/3. The domain is classified as high‑risk and remains active as of the report date. Defenders should add the domain to blocklists at network and endpoint layers, monitor DNS queries for the associated IP, and consider sinkholing the hostname to disrupt traffic. Continuous re‑evaluation is advised, as further malicious content may be deployed.