coeensqurelogin[.]webflow[.]io

This domain coeensqurelogin.webflow.io is assessed as an elevated risk credential phishing endpoint designed to harvest user authentication data. The page impersonates a financial login portal and is structured to mislead users into submitting sensitive credentials under the guise of an official Coinsquare sign-in interface.

Technical indicators show the domain is registered through Webflow and resolves to IP 172.64.151.8 located in the United States under AS13335 Cloudflare, Inc. VirusTotal analysis reports 18 of 95 security vendors flagging the domain as malicious. The page title is "Coinsquare Login - Sign in to your @ account(Official Website)" and the infrastructure appears on 1 security blocklist including PhishDestroy. Current operational status is taken offline, indicating partial mitigation or takedown action.

Despite being offline, the infrastructure remains relevant for threat tracking due to prior credential harvesting intent. The combination of Cloudflare-hosted IP masking, Webflow deployment, and brand impersonation suggests a templated phishing kit targeting financial account logins. Recommended mitigation includes continued domain and subdomain monitoring within Webflow-hosted environments, enforcement of brand impersonation detection rules, and blocking of associated IP 172.64.151.8. Users potentially exposed to this page should reset passwords immediately, enable multi-factor authentication, and review account sessions for unauthorized access attempts.