sec-i--itrustcapitall---authh[.]webflow[.]io

PhishDestroy identifies sec-i--itrustcapitall---authh.webflow.io as an elevated-risk domain engaged in generic phishing. The page masquerades as a legitimate IT services authentication portal to harvest user login credentials and sensitive data. This domain presents a significant threat by mimicking a corporate login interface. VirusTotal confirms 11 out of 95 security vendors flag this page as malicious, indicating widespread detection. The domain resolves to IP address 172.64.151.8 using a Google Trust Services SSL certificate, which may lend false legitimacy. Although no registrar or creation date is publicly listed for this Webflow.io subdomain, the presence of an active SSL certificate suggests recent deployment designed to evade suspicion. Multiple blocklists and threat intelligence feeds have flagged this domain, reinforcing its malicious intent. Users are advised to avoid accessing this domain and verify any unexpected login prompts by contacting the organization through official channels. Never input credentials or sensitive information into untrusted web forms, especially those hosted on third-party platforms like Webflow without prior verification. Organizations should implement web filtering rules to block access to sec-i--itrustcapitall---authh.webflow.io and similar suspicious subdomains. If a login page appears suddenly or unexpectedly, verify its authenticity via known, secure endpoints. Report such incidents to security teams immediately to prevent credential theft and potential account compromise