jito-foundation[.]com

This domain, jito-foundation.com, is identified as an active phishing infrastructure designed to impersonate legitimate Solana liquid staking services, specifically targeting users of the Across protocol. The site presents itself as the Jito Foundation, a known entity in the Solana ecosystem, with the page title "Jito Foundation | Solana Liquid Stake Pool: Non-Custodial Liquid Staking." Analysis indicates the domain is engineered to deceive users into submitting cryptocurrency assets under the guise of staking or yield generation, a common tactic in brand impersonation attacks within the decentralized finance sector.

Technical evidence confirms the malicious nature of this domain. Registered on September 22, 2025, through IONOS SE, the domain resolves to the IP address 84.200.89.128, hosted under AS214036 (Ultahost, Inc.) in Germany. Detection engines on VirusTotal flag the domain as malicious, with 14 out of 95 security vendors classifying it as phishing. Additionally, the domain appears on three independent security blocklists, and its SSL certificate, issued by DigiCert Inc (Encryption Everywhere DV TLS CA - G2), does not mitigate its fraudulent intent. Automated detection systems, including PhishDestroy, ScamSniffer, and Enkrypt, have already blocked access to this domain, further corroborating its classification as a high-risk threat.

Users who have visited jito-foundation.com or interacted with its content are advised to take immediate remedial action. Any credentials, wallet addresses, or transaction details shared with the site should be considered compromised. Affected individuals should revoke access to connected wallets, monitor accounts for unauthorized transactions, and report the incident to relevant security teams or decentralized finance platforms. Given the domain’s recent registration and active status, heightened vigilance is recommended for users engaging with Solana-based staking services, particularly those involving liquidity protocols or cross-chain bridges.