itrustcapitallogiini[.]webflow[.]io

This domain, itrustcapitallogiini.webflow.io, poses a brand impersonation threat specifically targeting iTrustCapital, a platform for cryptocurrency and precious metals IRA investments. The site replicates the legitimate iTrustCapital login interface to deceive users into entering their account credentials, which are then harvested by threat actors. Given the financial nature of the target brand, compromised credentials could lead to unauthorized access to investment accounts, fund transfers, or other fraudulent transactions involving cryptocurrency or retirement assets.

Analysis indicates the domain was registered through NameCheap, Inc. and is hosted on Cloudflare infrastructure (AS13335) with an IP resolution of 172.64.151.8. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to lend false legitimacy. The domain was created on February 21, 2026, though this date may reflect a typo or spoofed registration record. As of the latest scan, 14 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on one security blocklist, specifically PhishDestroy. The page title, 'iTrustCapital Login |,' further confirms its intent to mimic the official login portal.

Users who visited this domain or entered credentials should immediately revoke any active sessions on the legitimate iTrustCapital platform and change their passwords. Enable multi-factor authentication (MFA) if not already active, and monitor account statements for unauthorized transactions. If financial assets were transferred or compromised, report the incident to the platform and relevant financial authorities. Additionally, scan local devices for malware, as credential theft sites may deploy secondary payloads. Organizations should update their email and web filtering rules to block this domain and similar impersonation attempts targeting financial services.