ssso-itrustcapittal-com-cdn[.]webflow[.]io

This domain represents a targeted brand impersonation threat against iTrustCapital, a cryptocurrency IRA platform. The site mimics the legitimate iTrustCapital interface, using the page title 'iTrustCapital | The Crypto IRA Retirement Platform' to deceive users into entering credentials or financial information. The domain specifically targets individuals seeking retirement investment services, exploiting trust in the iTrustCapital brand to facilitate fraudulent transactions or account takeovers.

Analysis indicates the domain was registered on February 21, 2026, through NameCheap, Inc., and is hosted on Cloudflare infrastructure (AS13335) at IP address 172.64.151.8. VirusTotal reports 17 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to lend false legitimacy to phishing sites. The domain's creation date suggests recent deployment, aligning with typical phishing campaign timelines.

Users who visited ssso-itrustcapittal-com-cdn.webflow.io should immediately revoke any entered credentials and monitor financial accounts for unauthorized activity. Reset passwords for iTrustCapital and any other platforms where identical credentials were reused. Report the incident to the legitimate iTrustCapital security team and consider placing a fraud alert on credit files. Network administrators should block the domain and associated IP (172.64.151.8) at the perimeter to prevent further access attempts.