my--sso--itrsutcapital-com---h--auth[.]webflow[.]io

This domain poses a direct credential harvesting risk by impersonating the iTrustCapital authentication interface. The page title Log in | iTrustCapital combined with the obfuscated subdomain structure indicates an active campaign designed to capture usernames and passwords from financial service users. Infrastructure analysis reveals the site remains operational and leverages a content delivery network endpoint for rapid deployment.

Technical indicators include resolution to IP 104.18.36.248, issuance of an SSL certificate through Google Trust Services, and registration via MarkMonitor, Inc. on May 08, 2013. VirusTotal currently lists 10/95 security vendors flagging the domain while the high risk level and active status confirm ongoing threat persistence without evidence of remediation.

Users who accessed the domain should immediately change iTrustCapital credentials from a verified device, enable multi-factor authentication, and review account activity for unauthorized transactions. Device scanning with updated security tools is recommended alongside monitoring for phishing emails or follow-on fraud attempts. Report the URL to the hosting provider and relevant financial institutions to support takedown efforts.