VirusTotal
3 / 89
“Vercel Security Checkpoint”
This domain, www.jitodesktop.network, is flagged for brand impersonation targeting Jito, a known entity in the cryptocurrency ecosystem.
The detailed PhishDestroy AI analysis below remains in English to preserve the original forensic record.
This domain, www.jitodesktop.network, is flagged for brand impersonation targeting Jito, a known entity in the cryptocurrency ecosystem. The site poses a risk of credential harvesting or fraudulent transactions by mimicking legitimate Jito services. Users may be tricked into entering sensitive information, such as wallet credentials or private keys, under the false pretense of security verification or account updates. The elevated risk level is due to the domain's convincing replication of Jito's branding and the use of a security-themed page title, which increases the likelihood of successful deception. Analysis indicates the domain resolves to the IP address 64.29.17.65 and was registered through Vercel Inc. It appears on one security blocklist, and two out of ninety-five security vendors on VirusTotal have flagged it as malicious. The SSL certificate is issued by Let's Encrypt, a common practice among both legitimate and malicious sites to encrypt traffic. Technologies detected include Vercel hosting and HTTP Strict Transport Security (HSTS), which, while typically a security feature, is also leveraged here to lend an air of legitimacy. The page title, 'Vercel Security Checkpoint,' further suggests an attempt to deceive users into believing the site is part of a legitimate security process. If you visited www.jitodesktop.network, immediate action is required to mitigate potential risks. First, disconnect the device used to access the site from any networks to prevent further data exfiltration. Clear all browser data, including cookies, cache, and saved passwords, to remove any residual artifacts. If any credentials or private keys were entered, assume they are compromised and revoke access to associated accounts or wallets immediately. Monitor linked accounts for unauthorized transactions or changes. Additionally, scan the device for malware using updated security tools, as some phishing sites may deliver secondary payloads. Report the incident to relevant security teams or platforms to aid in broader threat mitigation efforts.
The page served one response to a browser-like visitor and another to a crawler or security scanner. Cloaking exists only to keep reviewers away from the real landing page.
status_splitScanner note: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-10749.invalid', port=80): Max retries exceeded with url: / (Caused by N
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP reputation is not attributed to this domain.
Location describes the IP network.
42c5a1c4614dfaef4f55b9ab30808232808935308bf5b7fc626e7d7438d2b4ccSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of duplicate-disabled-10749.invalid · checked Jun 27, 2026
13 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Select your country to get official cybercrime contacts, or create a complaint draft →.
Template-based draft · optional AI wording assistance requires separate consent
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowSubmit suspicious domains to our threat database — protect the community
ReportRecent phishing reports and observed availability changes
MonitorMonitor live threats or contest this listing if you believe it's a false positive