sso-i-trustcapta-l-auth[.]webflow[.]io

The domain sso-i-trustcapta-l-auth.webflow.io is classified as a generic phishing threat, specifically designed to impersonate iTrustCapital. This domain seeks to deceive users into providing sensitive credentials by mimicking the legitimate login page associated with the brand. No known drainer kit has been identified in relation to this domain, indicating a straightforward phishing setup aimed at credential harvesting.

Technical indicators reveal that the domain was created on May 08, 2013, and is registered through MarkMonitor, Inc. It currently resolves to the IP address 172.64.151.8 and has a VirusTotal score of 9 out of 95 security vendors. The domain is secured with an SSL certificate issued by Google Trust Services, which can mislead users into believing it is a secure site. Additionally, it is flagged by 9 security vendors on VirusTotal, indicating significant potential threat awareness.

As of the current analysis, the domain remains active, and users are advised to exercise caution when encountering this site. Incident response actions should include monitoring for phishing attempts and implementing DNS-based filtering to block the domain. The ongoing risk remains high given its active status and the potential for users to fall victim to credential theft.