jitoclaim[.]network

jitoclaim.network is currently active and hosted behind Cloudflare (ASN 13335). The domain resolves to 188.114.96.3, a Cloudflare‑owned IP located in the United States. Registration data shows creation on 2025-11-08 through NiceNIC International Group Co., Limited, and the authoritative nameservers are kipp.ns.cloudflare.com and gloria.ns.cloudflare.com. The site presents an HTTP 403 response and serves a TLS certificate issued by Google Trust Services under the WE1 profile, indicating a valid HTTPS endpoint. The page title returned by the server is "Nur einen Moment…", which does not reveal the content of the page. Security telemetry places jitoclaim.network on three public blocklists (PhishDestroy, ScamSniffer, Enkrypt) and records it as a crypto‑scam impersonating the Jito brand. VirusTotal has two detections out of ninety‑five scanners, confirming that at least two security products flag the domain as malicious. Cloudflare‑specific technologies observed include Cloudflare Browser Insights and HTTP/3 support. Analysis confirms that the infrastructure is typical of abuse‑hosting campaigns that leverage Cloudflare’s CDN and SSL termination to obscure origin. The exact payload or credential‑harvesting mechanisms cannot be verified because the site returns only a 403 status and no further content has been captured. Defenders should block the domain and associated IP address at the network perimeter, update DNS filtering policies, and monitor for any traffic to the listed nameservers. Continued observation is advised to detect any change in HTTP response or emergence of additional malicious activity.