nav-i-trustcaptall[.]wixstudio[.]com

This domain, nav-i-trustcaptall.wixstudio.com, operates as a credential harvesting phishing site targeting users of a cryptocurrency investment platform. The site presents a fraudulent login page titled 'iTrustCapital® Login | Secure™,' designed to deceive visitors into entering sensitive account credentials, which are then captured by threat actors for unauthorized access or financial theft. The impersonation of a legitimate financial service increases the likelihood of successful compromise, particularly among users expecting to manage digital assets or retirement accounts through the genuine platform.

Analysis indicates the domain was registered through GoDaddy.com, LLC on December 17, 2016, though the phishing content appears to have been deployed more recently. It resolves to the IP address 34.144.206.118 and is currently flagged by 5 out of 95 security vendors on VirusTotal. The domain appears on three security blocklists—PhishDestroy, PhishingArmy, and OISD—confirming its malicious classification. The site uses a Let's Encrypt SSL certificate, which provides encrypted connections but does not validate legitimacy, a common tactic in phishing infrastructure to appear trustworthy.

Individuals who visited nav-i-trustcaptall.wixstudio.com should assume their credentials may have been compromised. Immediately reset passwords for any accounts accessed through the site, particularly those linked to financial services or cryptocurrency platforms. Enable multi-factor authentication where available to prevent unauthorized access. Monitor associated accounts for suspicious activity, including unauthorized transactions or login attempts. If financial information was entered, notify relevant institutions and consider placing a fraud alert on credit reports. Report the incident to local cybersecurity authorities or dedicated fraud reporting platforms to aid in tracking and mitigating further threats.