jitoredirect-1761079080082-017rt6sq[.]pages[.]dev

PhishDestroy identifies the domain jitoredirect-1761079080082-017rt6sq.pages.dev as a malicious site actively impersonating the Jito crypto brand to deploy a crypto drainer. This domain uses Cloudflare’s infrastructure and resolves to IP 172.66.47.196, hosting a page titled 'Redirect / Anti-DevTools Example' to evade detection. The site leverages Google Trust Services for its SSL certificate, adding a false sense of legitimacy while masking its true intent to steal crypto assets. This is a high-risk threat vector, as crypto drainers are designed to silently siphon funds from victims’ wallets without their knowledge, often bypassing traditional security measures. This domain was flagged under PhishDestroy’s seed 077820, with VirusTotal currently showing 1/95 detections, meaning it has not yet been widely recognized by antivirus engines. The registrar is Cloudflare, Inc., a common choice for malicious actors due to its anonymity features, and the domain is still active as of the latest check. The page title itself—'Redirect / Anti-DevTools Example'—suggests an attempt to evade detection by security researchers using browser developer tools. Such tactics are typical of crypto drainers, which rely on obfuscation and redirection to trick users into connecting their wallets or entering sensitive information. If you visited this domain, assume your device or crypto wallet may have been compromised. Do not interact with any wallets or enter credentials on this site. Disconnect from the internet if possible, clear your browser cache and cookies, and scan your device with reputable antivirus software. For crypto users, revoke any wallet connections immediately via tools like revoke.cash or similar services. Verify the legitimacy of Jito’s official channels (website, social media) directly—never through third-party links. Report this domain to PhishDestroy for further analysis and to help protect others from this threat.