jito-claim[.]network

On July 24, 2026 analysts observed that the domain jito-claim.network was registered through Cloudflare, Inc. and delegated to the Cloudflare nameservers kyle.ns.cloudflare.com and pat.ns.cloudflare.com. The domain resolves to the IP address 104.21.25.21, which is owned by AS13335 Cloudflare, Inc. and geolocated to the United States. No TLS certificate is presented, indicating that the site does not serve HTTPS traffic. An HTTP request to the domain returned the page title "Plesk Obsidian 18.0.71," a default administrative interface title that suggests the server is running a Plesk control panel rather than a purpose‑built phishing landing page. The infrastructure analysis therefore points to a misconfigured or abandoned hosting environment rather than a actively maintained malicious site.

The domain is currently offline, but historical scans show it was flagged by ten of ninety‑five VirusTotal scanners, and it appears on three security blocklists. Specifically, PhishDestroy, ScamSniffer, and Enkrypt have listed the domain as malicious. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the assessment of high risk. The threat type is recorded as a crypto scam that impersonates the brand Jito, indicating that any prior content likely attempted to lure victims into a cryptocurrency‑related fraud.

Given the absence of a valid SSL certificate, the low trust score, and multiple vendor detections, defenders should treat jito-claim.network as a high‑risk indicator. Recommended mitigations include adding the domain to DNS‑level blocklists, updating firewall deny rules, and monitoring the associated IP address for re‑hosting activity. Continuous observation of the Cloudflare nameservers for new subdomains is advised, as the attacker may redeploy the campaign on a different hostname within the same account.