votes-jito[.]network

votes-jito.network has been identified as an active brand impersonation domain targeting the Jito ecosystem. The domain is currently under investigation and poses a credible threat to users who may mistake it for an official Jito service portal.

This domain exhibits multiple red flags: it impersonates the Jito brand, which is a well-known Solana validator and liquid staking protocol; it resolves to the IP address 172.67.205.246; the SSL certificate is issued by Let's Encrypt; it was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 24, 2026; and at present, it remains undetected by 2 out of 95 VirusTotal scanners. No known blocklists or threat intelligence feeds currently flag this domain, and it has not been assigned a trust score due to its recent registration and low detection rate.

To mitigate exposure to this threat, users should immediately refrain from visiting votes-jito.network and avoid interacting with any links or emails referencing this domain. Organizations should consider blocking the IP address 172.67.205.246 and the domain at the network perimeter. Security teams are advised to monitor for any related infrastructure or additional impersonation domains mimicking Jito. Additionally, end-users should verify the authenticity of any Jito-related domains by cross-referencing with official Jito communication channels and ensuring the use of HTTPS with valid certificates from trusted issuers.