jito-apps[.]com

This domain, jito-apps.com, is flagged as a brand impersonation threat specifically targeting the Solana ecosystem. Analysis indicates the site mimics the Jito Foundation, a known Solana liquid staking protocol, to deceive users into interacting with fraudulent smart contracts or disclosing sensitive wallet credentials. The page title, 'Jito Foundation | Solana Liquid Stake Pool: Non-Custodial Liquid Staking,' directly replicates the branding of the legitimate service, increasing the likelihood of successful social engineering attacks against Solana users seeking staking opportunities. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain was registered on March 12, 2026, through Name SRS AB, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.208.32, which is part of a network range commonly used for content delivery but also observed in phishing campaigns leveraging Cloudflare services. VirusTotal detection shows 3 out of 95 security vendors flagging the domain as malicious, while it appears on 4 distinct security blocklists. Technologies detected include Node.js, Handlebars, Express, and Cloudflare, suggesting a dynamically generated frontend designed to evade static detection mechanisms. As of the latest assessment, jito-apps.com has been taken offline, likely in response to security community reports and blocklist inclusions. However, residual risk remains elevated due to the domain's registration remaining active and the potential for infrastructure reuse. Users who interacted with the site are advised to revoke any connected wallet permissions, monitor transaction histories for unauthorized activity, and verify the legitimacy of any Solana-based services before engagement. Organizations should maintain blocklist updates and monitor for re-emergence of similar impersonation domains targeting decentralized finance platforms.