jito-stak[.]ing[.]network

The domain jito-stak.ing.network was registered through Porkbun LLC on May 09, 2026 and is currently classified as a high‑risk generic phishing site. Its status is listed as active and it appears on one public security blocklist. The site returns HTTP 200 responses, indicating that a web server is actively hosting content. Infrastructure analysis shows the domain resolves to the IPv4 address 52.33.207.7, which is hosted on an Amazon Web Services EC2 instance in the us‑west‑2 region of the United States. The authoritative nameservers are maceio.ns.porkbun.com, curitiba.ns.porkbun.com, and salvador.ns.porkbun.com. The site presents a valid Let’s Encrypt certificate (R12) for the host name, allowing encrypted HTTPS connections. Threat intelligence from VirusTotal records three out of ninety‑five scanners flagging the domain as malicious, and Gridinsoft assigns a trust score of 0 out of 100. The domain is also listed as blocked by the PhishDestroy blocklist. While the low number of VirusTotal detections suggests limited public exposure, the zero trust score and blocklist inclusion indicate a high confidence of phishing use. No additional indicators such as payload hashes or command‑and‑control URLs have been observed, leaving the exact phishing content and target profile uncertain. Defenders should immediately add jito-stak.ing.network to deny lists on perimeter firewalls, DNS filtering services, and web proxy solutions. Continuous monitoring of DNS queries for the three Porkbun nameservers is recommended to detect any surge in resolution attempts. Given the active HTTPS service, TLS inspection may be required to uncover the malicious landing page. Organizations should also review any recent user reports of credential‑harvesting attempts that reference the domain or its sub‑paths.