# jito.solcore.cc — MALICIOUS

> Explore the phishing risks linked to jito.solcore.cc, an airdrop-themed site flagged for suspicious activity and now taken offline.

## Summary
PhishDestroy assesses jito.solcore.cc as a medium-risk generic phishing threat. The domain was primarily used in a phishing campaign masquerading as the Jito Foundation's airdrop page, aiming to deceive users into divulging sensitive information.

Evidence supporting this assessment includes the domain's recent creation date of August 7, 2025, and its registration via CNOBIN INFORMATION TECHNOLOGY LIMITED, which is often associated with suspicious registrations. The domain resolved to IP address 172.67.145.240 and appeared on one security blocklist. Additionally, 9 out of 95 security vendors on VirusTotal flagged the domain, and it holds a low Gridinsoft trust score of 30 out of 100, reinforcing its malicious intent.

Currently, jito.solcore.cc is offline, mitigating immediate risk to users. PhishDestroy recommends continued vigilance against similar phishing infrastructures exploiting airdrop themes. Users should avoid interacting with suspicious airdrop offers and verify domain legitimacy through trusted sources before submitting any credentials or personal data.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Jito Foundation | Airdrop

## Domain Intelligence
- Registered: 2025-08-07 19:04:40
- Expires: 2026-08-07 19:04:40
- Registrar: CNOBIN INFORMATION TECHNOLOGY LIMITED
- Country: CN
- IP: 172.67.145.240
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ligia.ns.cloudflare.com steven.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 9 vendors flagged
  Vendors: ["BitDefender", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Seclookup", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0198df6f-509d-724c-b4c9-7385cf40b80a.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e0009812-c3bf-4d1a-8d1d-2b10b32a8451
- PhishDestroy: https://phishdestroy.io/domain/jito.solcore.cc/
- LLM endpoint: https://phishdestroy.io/domain/jito.solcore.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/jito.solcore.cc/
Last updated: 2026-03-19