jitorew[.]com

This domain, jitorew.com, poses a brand impersonation threat targeting users of the Across protocol by falsely presenting itself as an official Jito MEV reward portal. The site displays a page titled 'Jito MEV Reward | by Jito Labs,' a clear attempt to deceive visitors into believing they are interacting with legitimate reward distribution infrastructure. Such impersonation tactics are commonly used to trick users into connecting wallets or entering sensitive credentials, potentially leading to unauthorized access or asset theft. Analysis indicates the domain was registered on October 26, 2025, through NiceNIC International Group Co., Limited, a registrar often associated with high-risk domains. It resolved to the IP address 172.67.171.29 and was flagged by 1 out of 95 security vendors on VirusTotal, reflecting limited but confirmed detection. The domain appears on two security blocklists and holds a Gridinsoft trust score of 0/100, further corroborating its malicious nature. Despite its current offline status, the infrastructure remains a documented threat. Users who visited jitorew.com should immediately revoke any wallet permissions granted through the site, as these could enable ongoing unauthorized transactions. Monitor connected accounts for unusual activity and consider replacing compromised credentials, especially if sensitive information was entered. Report the domain to relevant security teams or blocklist providers to assist in broader threat mitigation efforts. Given the domain's recent creation and association with known fraud patterns, remain vigilant for similar impersonation attempts targeting decentralized finance platforms.