itrustcapitalogines[.]webflow[.]io

This report details a credential phishing threat identified as itrustcapitalogines.webflow.io. The page title, "iTrustCapital Login," indicates the site masqueraded as the legitimate iTrustCapital cryptocurrency retirement platform. The threat posed was credential harvesting, designed to capture user login credentials for unauthorized account access and potential financial theft.

Technical evidence confirms the malicious nature of this domain. VirusTotal analysis shows 17 out of 95 security vendors flagged the site as malicious, with specific flags from ADMINUSLabs, BitDefender, CyRadar, ESET, and Emsisoft. The domain is listed on one blocklist. It was registered through NameCheap, Inc. and created on February 21, 2026. The site resolved to IP address 172.64.151.8, located in the United States and hosted by AS13335 Cloudflare, Inc. The SSL certificate was issued by Google Trust Services / WE1.

As of this report, the domain is currently down or offline, significantly reducing the immediate risk. However, given its recent creation date and high detection rate, the domain represents a high-risk threat for credential theft. Users should be advised that similar domains may appear and to verify URLs directly through official channels.