jito-staking[.]xyz

Analysis of jito-staking.xyz, first observed on July 3 2026, indicates an active generic phishing infrastructure. The domain is registered through NameSilo, LLC and uses the dnsowl.com name server set (ns1, ns2, ns3). DNS resolution points to the IPv4 address 186.2.175.35, which is the sole hosting endpoint identified. The domain appears on a single security blocklist and has been flagged by PhishDestroy, confirming its inclusion in active mitigation feeds.

VirusTotal records show that one of ninety‑one scanning engines flagged the domain, providing a minimal but non‑zero detection signal. The risk rating is high and the current status remains active. The short registration window—created only 27 days before the report date—suggests a fast‑flux style deployment typical of phishing campaigns that rely on newly minted domains to evade reputation buildup. No additional intelligence such as SSL certificate details, HTTP response codes, or page title information is presently available, limiting the ability to characterize the landing page content.

Defenders should block traffic to 186.2.175.35 and add jito-staking.xyz to local deny lists. Monitoring of the associated name servers and the registrar NameSilo for future domain creations is recommended, as is continued observation of the blocklist entries that currently reference this domain. Given the high risk classification and the confirmed phishing detection, organizations handling credential or financial flows should treat any communications referencing jito‑staking.xyz as malicious and enforce strict email and web filtering controls.