jitoredirect-1761078072499-a9dgsqd7[.]pages[.]dev

PhishDestroy identifies jitoredirect-1761078072499-a9dgsqd7.pages.dev as an active crypto drainer masquerading as the legitimate Jito brand. This domain is designed to deceive users into connecting wallets or entering credentials, enabling direct theft of cryptocurrency assets. The page title 'Redirect / Anti-DevTools Example' suggests advanced evasion techniques to bypass security tools, increasing the risk of undetected exploitation.

This fraudulent domain was registered through Cloudflare, Inc. and resolves to IP 188.114.97.3, secured by a Google Trust Services SSL certificate for added legitimacy. VirusTotal analysis confirms 0 detections out of 95 security vendors, indicating it remains undetected by most scanning tools. Despite its current low profile on blocklists, the domain exhibits clear malicious intent, including active impersonation of Jito and anti-forensic measures to evade detection.

Users who visited this domain should immediately disconnect their wallets, revoke any connected permissions, and scan their devices for malware. Verify the legitimacy of domains using PhishDestroy’s threat intelligence before interacting. Never enter credentials or connect wallets to unverified sites, especially those impersonating well-known brands like Jito.