VirusTotal
3 / 89
“Vercel Security Checkpoint”
This domain, www.jitodesktop.network, is flagged for brand impersonation targeting Jito, a known entity in the cryptocurrency ecosystem.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
This domain, www.jitodesktop.network, is flagged for brand impersonation targeting Jito, a known entity in the cryptocurrency ecosystem. The site poses a risk of credential harvesting or fraudulent transactions by mimicking legitimate Jito services. Users may be tricked into entering sensitive information, such as wallet credentials or private keys, under the false pretense of security verification or account updates. The elevated risk level is due to the domain's convincing replication of Jito's branding and the use of a security-themed page title, which increases the likelihood of successful deception. Analysis indicates the domain resolves to the IP address 64.29.17.65 and was registered through Vercel Inc. It appears on one security blocklist, and two out of ninety-five security vendors on VirusTotal have flagged it as malicious. The SSL certificate is issued by Let's Encrypt, a common practice among both legitimate and malicious sites to encrypt traffic. Technologies detected include Vercel hosting and HTTP Strict Transport Security (HSTS), which, while typically a security feature, is also leveraged here to lend an air of legitimacy. The page title, 'Vercel Security Checkpoint,' further suggests an attempt to deceive users into believing the site is part of a legitimate security process. If you visited www.jitodesktop.network, immediate action is required to mitigate potential risks. First, disconnect the device used to access the site from any networks to prevent further data exfiltration. Clear all browser data, including cookies, cache, and saved passwords, to remove any residual artifacts. If any credentials or private keys were entered, assume they are compromised and revoke access to associated accounts or wallets immediately. Monitor linked accounts for unauthorized transactions or changes. Additionally, scan the device for malware using updated security tools, as some phishing sites may deliver secondary payloads. Report the incident to relevant security teams or platforms to aid in broader threat mitigation efforts.
Страница выдавала один ответ посетителю, действующему как браузер, и другой — поисковому роботу или сканеру безопасности. Маскировка используется исключительно для того, чтобы не допустить рецензентов к реальной целевой странице.
status_splitПримечание к сканированию: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-10749.invalid', port=80): Max retries exceeded with url: / (Caused by N
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Репутация Edge-IP не связана с этим доменом.
Location describes the IP network.
42c5a1c4614dfaef4f55b9ab30808232808935308bf5b7fc626e7d7438d2b4ccSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of duplicate-disabled-10749.invalid · checked Jun 27, 2026
13 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Template-based draft · optional AI wording assistance requires separate consent
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасДобавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьНедавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьОтслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание