coinscuare-logi[.]webflow[.]io

Analysis of the domain coinscuare-logi.webflow.io indicates a phishing campaign targeting the Coinsquare brand, as evidenced by the page title 'The new Coinsquare is here.' The domain was registered on February 21, 2026, through NameCheap, Inc., and resolves to the IP address 104.18.36.248, which is hosted on Cloudflare's infrastructure (AS13335) in the United States. The site employs Webflow and Cloudflare technologies, alongside HTTP/3, and presents a valid SSL certificate issued by Google Trust Services (WE1). As of July 23, 2026, the domain returns an HTTP 404 status, suggesting it has been taken offline or is no longer actively serving malicious content. Detection metrics reveal moderate confidence in malicious classification: 12 of 95 security vendors on VirusTotal flagged the domain, and it appears on one security blocklist, specifically PhishDestroy.

Gridinsoft assigns a trust score of 0/100, further supporting the assessment of elevated risk. The combination of brand impersonation, low trust scores, and detection by multiple security vendors aligns with known phishing tactics, though the exact payload or lure mechanism remains unconfirmed due to the domain's current offline status. Defenders should treat this domain as part of a broader phishing campaign targeting cryptocurrency users. The use of Webflow, a legitimate web development platform, may complicate automated detection, necessitating reliance on reputation-based blocking and manual review of page titles or brand references.

Given the domain's association with Cloudflare, future iterations may reappear under similar infrastructure. Monitoring for re-registration or DNS changes is recommended, alongside cross-referencing with known Coinsquare-themed phishing indicators. No additional brand-specific details or scam mechanics are available at this time.