iturrestcpitllogin[.]webflow[.]io

This domain is flagged as a credential phishing site targeting iTrustCapital, a cryptocurrency retirement platform. The page title explicitly references iTrustCapital and the login interface, indicating an attempt to harvest user credentials. The domain was registered on April 24, 2026, through Webflow, and remains active as of the report date of July 12, 2026. Infrastructure analysis shows the domain resolves to IP address 172.64.151.8, hosted by Cloudflare, Inc. in Canada, with SSL certification from Google Trust Services. Security assessments are uniformly negative: Scamadviser assigns a trust score of 1 out of 100, Gridinsoft rates it 0 out of 100, and the domain appears on one security blocklist, specifically PhishDestroy. VirusTotal data indicates 20 out of 94 security vendors flag the domain as malicious. The domain uses Cloudflare and HTTP/3 technologies, with no nameservers found during analysis. Defenders should treat this domain as an active threat, block access at the network level, and ensure users are warned against entering credentials. Continuous monitoring is recommended as the domain may be updated or redirected to additional phishing infrastructure. The exact visual content of the site has not been analysed, but the page title and scam type confirm credential theft as the primary objective.