# itrustcapitadllogin.webflow.io — SUSPICIOUS

> itrustcapitadllogin.webflow.io is a credential theft phishing domain impersonating iTrustCapital. VirusTotal shows 0/95 detections—check before you click.

## Summary
PhishDestroy identifies the active credential phishing domain itrustcapitadllogin.webflow.io which impersonates the legitimate cryptocurrency investment platform iTrustCapital. The threat type is credential theft via a spoofed login portal hosted on Webflow, a reputable site-building platform exploited for phishing campaigns. No crypto drainer kit artifacts were detected in initial sandbox analysis, indicating a straightforward login credential harvesting scheme targeting iTrustCapital users.

Technical indicators for this domain include a clean VirusTotal score of 0 detections out of 95 engines, resolving to IP address 172.64.151.8 via Cloudflare’s infrastructure, and a Google Trust Services SSL certificate. The domain was registered through Cloudflare, Inc. with a creation date of 2024-05-15, and currently shows no blocklist presence in Google Safe Browsing (GSB) or other threat intelligence feeds as of the investigation timestamp. This combination of evasive infrastructure and absence of detections suggests either a very recent deployment or a carefully crafted campaign designed to bypass early-stage scrutiny.

Current status of itrustcapitadllogin.webflow.io is classified as active with threat level under investigation. Immediate response actions include coordination with Webflow’s abuse team for takedown via the seed 0af244 identifier, sharing IOCs with cybersecurity platforms including VirusTotal for enhanced detection, and notifying iTrustCapital for customer awareness and brand protection. Despite these actions, residual risk remains moderate due to the domain’s plausible domain structure, use of HTTPS, and lack of current detections. Users are strongly advised to verify URLs via official channels and enable multi-factor authentication on iTrustCapital accounts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 172.64.151.8

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/itrustcapitadllogin.webflow.io
- PhishDestroy: https://phishdestroy.io/domain/itrustcapitadllogin.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/itrustcapitadllogin.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/itrustcapitadllogin.webflow.io/
Last updated: 2026-04-04