signin-coinssquare--securee[.]webflow[.]io

This report details a credential phishing threat targeting the Coinsquare brand. The site, titled "Coinsquare | Login," masquerades as a legitimate login portal to capture user credentials. The threat is that users who enter their login details on this page risk account compromise and potential financial theft from the actual Coinsquare platform.

Technical analysis confirms the malicious nature of the site. VirusTotal data shows 18 out of 95 detection engines flagged the domain as malicious. Reputable security vendors including ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, and DNS8 have identified it as a threat. The domain was registered with Webflow and resolved to IP address 104.18.36.248, hosted by Cloudflare, Inc. in Canada. The SSL certificate was issued by Google Trust Services / WE1. GridinSoft assigned a trust score of 0 out of 100, and the domain risk score is 78.

The site is currently reported as down or offline. Based on the high detection rate, low trust score, and elevated risk score, the threat level is assessed as high. Users should avoid any interaction with this domain and ensure their credentials for the legitimate Coinsquare service have not been compromised.