jito-sol[.]app

The domain jito-sol.app was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently served by Cloudflare nameservers alexis.ns.cloudflare.com and brenda.ns.cloudflare.com. DNS resolution points to IP address 172.67.160.176, which belongs to the Cloudflare network (AS13335) located in the United States.

Access to the site returns HTTP status code 403 and displays the generic page title “Just a moment…”. The SSL certificate presented is issued by Google Trust Services under the WE1 profile, indicating a valid TLS handshake but providing no indication of legitimate ownership. The domain receives a Gridinsoft trust score of 0/100, is listed on a single security blocklist, and has been flagged by PhishDestroy as an active impersonation campaign targeting the Jito brand.

VirusTotal reports that four of ninety‑five scanning engines have identified malicious characteristics associated with the domain, reinforcing its classification as a high‑risk brand impersonation threat. The use of Cloudflare’s edge infrastructure masks the underlying hosting environment, a common tactic for abuse operators seeking to evade takedown. The combination of a recent creation date, low trust rating, and active blocklist entries suggests a purposeful attempt to harvest credentials or deceive users of the Jito service.

Defenders should block DNS resolution for jito-sol.app at the network perimeter and add the associated IP 172.67.160.176 to any existing deny lists. Email gateways should flag any messages containing links to this domain as malicious. Continuous monitoring of Cloudflare‑served IP ranges for similar new registrations and rapid re‑evaluation of security vendor alerts are recommended to mitigate further brand‑impersonation campaigns.