coinsqure-eng[.]zapier[.]app

This domain, coinsqure-eng.zapier.app, is flagged as a credential phishing site impersonating Coinsquare, a cryptocurrency exchange platform. Analysis indicates the page title "Coinsquare® Login™ ✦ Secure" was used to deceive users into submitting login credentials, likely for account takeover or unauthorized fund transfers. No specific drainer kit signatures were identified, but the domain exhibits characteristics consistent with generic phishing infrastructure. Infrastructure analysis reveals the domain was registered through Name.com, Inc. and resolved to IP address 64.239.123.129. VirusTotal detection shows 19 out of 95 security vendors flagged the domain as malicious. The SSL certificate was issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. The domain appears on one security blocklist and was blocked by at least one threat intelligence feed. No creation date was provided, but the use of a subdomain under zapier.app suggests an attempt to exploit a legitimate service for hosting malicious content. The domain is currently offline, reducing immediate risk to end users. However, the infrastructure may be reactivated or repurposed for future campaigns. Response actions should include monitoring for related subdomains or IPs, updating blocklists, and alerting users who may have interacted with the domain. Remaining risk includes potential credential exposure from prior victims and the possibility of similar phishing domains leveraging the same registrar or hosting provider. Organizations should verify logs for connections to 64.239.123.129 and review authentication attempts during the domain's active period.