Is itrustcapitaltaxreform.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page "Crypto Tax Updates" gateway presented under the iTrustCapital name. It shows a short list of tax bulletins: a possible 7–10% annual withholding tax, Form 1099-DA now being live, specific-lot relief expiring on December 31, 2026, different treatment of crypto IRA trades, and taxable staking becoming harder to defer. A "desktop access required" notice then routes visitors to a DocuSign-hosted PDF transcript. The page identifies ITC2.0, Inc. with a street address in Irvine, California, and its apparent purpose is customer-resource distribution for a crypto brokerage and crypto IRA provider that earns fees from trading, custody and retirement-account services.

Scam/Impersonation Risk

The decisive concern is that the domain is currently blacklisted by external threat-intelligence sources, which is a confirmed contradiction. Independent detections also place the domain in a known-phishing context. The domain was registered only days before analysis, through the registrar NICENIC International Group, and it carries a well-known brand name in a subject-specific hostname. The page itself does not show an impersonation pattern: it has no login form, no payment request and no hidden forms. The operator is also not independently linked to the brand it names, so the on-page corporate name and address cannot be treated as proof of identity. The gating mechanism adds exposure. A desktop-only step that pushes visitors to an external document viewer is a common way to filter automated scanners and then deliver a credential, document-signing or onboarding lure. The specific tax deadlines and the "current through September 2026" framing give the page urgency and plausibility, which suits a lure aimed at existing customers of a crypto retirement platform. The page's network behavior was also noisy: nearly all of its observed traffic went to external hosts, and the browser logged repeated console errors. No non-whitelisted destinations or wallet-drainer behavior were observed. Evidence:

• Homepage: a desktop-only gate leads to an external DocuSign transcript link, with no credential or payment form on the page itself.
• Homepage: tax bullets (7–10% withholding, Form 1099-DA, specific-lot relief expiring December 31, 2026, taxable staking) supply time-sensitive content for customers of a crypto retirement provider.
• Domain registered 2026-09-30 (~19 days old, ~0.05 years) via NICENIC International Group Co., Limited.
• Browser sandbox: 3 of 3 runs completed, about 27 external fetch requests and 9 external POSTs, 9 console errors, and no non-whitelisted destinations.

Regulatory Verification Notes

The page names ITC2.0, Inc. (iTrustCapital) and links Privacy and Terms pages, but it cites no licence, registration number or regulator. For a business that offers crypto brokerage and retirement-account services, that is a significant disclosure gap. No third-party broker or regulatory-database match was found for this domain, and the absence of a match is not a regulatory finding either way. The terms and privacy pages are the only legal documents referenced, and they did not provide any registration details to reconcile with the corporate name on the page. No conflicting legal entities appear across the pages examined, so no identity contradiction is present. The domain's registration details are also incomplete, which limits independent attribution of the operator, but this is an administrative limitation and not a standalone indicator of fraud. Evidence:

• Homepage footer: the legal name ITC2.0, Inc., a street address and a 2026 copyright line, with no licence or regulator reference.
• Transport security: DV certificate from issuer YE1, valid to 2026-12-29. DV validation confirms control of the domain only, not the identity of the organization.
• Served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any interaction, confirm independently whether this domain is an officially published iTrustCapital property. Use the company's own known channels, such as the official website or app, an account dashboard, or the telephone number printed on account statements. Do not use any link, contact detail or chat widget found on this page. Confirm the tax information and any transcript through the official customer portal instead of the DocuSign link. Check ITC2.0, Inc.'s corporate registration and its licensing or custodial status directly with the relevant state and federal registries. If the domain is not confirmed as official, report it to the brand owner and the registrar's abuse desk. Evidence:

• Homepage: the page's operator claim rests entirely on its own text, and the domain itself has not been tied to the brand.
• Homepage: the external transcript link is the only action the page offers, so its destination should be checked only through official channels.
• The domain is only days old, and its brand-bearing name should be reconciled with the brand's official domain list.

Summary Verdict

The overall posture is high-risk. Confirmed external blacklisting and the domain's very recent creation outweigh the page's benign appearance and its absence of overt credential harvesting. The apparent corporate identity remains unverified, and the page's structure is consistent with a staging point for later sensitive interactions. The few technical positives (valid encryption, stable page delivery and a mainstream network provider) do not offset the reputational evidence.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall, and every observed address is a Cloudflare edge address, so the true origin server is not visible. This is a mitigating factor only. It shows the site is not hosted on obviously disposable infrastructure, but it also prevents independent hosting verification and allows content to be changed behind the edge without outside visibility. The shared infrastructure carries no abuse history of its own, so protection at the network level cannot offset the domain's reputation problem.

Closing Assessment

Treat the site as unsuitable for anything beyond passive viewing. Do not sign in, enter credentials, open the linked document, or provide personal or financial details through it. Access any iTrustCapital services only by typing the official address directly or using the official app.