jito-network[.]net

The domain jito-network.net is a confirmed phishing site engaged in brand impersonation targeting Discord users. It presents itself as a legitimate Jito Foundation portal offering JTO tokens but is designed to harvest wallet connections and credentials through a wallet-connect phishing scheme. No crypto drainer kit was detected. The site is currently taken offline, though prior activity classified it as an elevated-risk threat.

Technical indicators confirm the malicious nature of jito-network.net. The domain was flagged by 3 of 95 VirusTotal security vendors, including alphaMountain.ai, CRDF, and Forcepoint ThreatSeeker. It appears on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. Registered through Web Commerce Communications Limited on August 22, 2025, the domain resolves to IP address 104.21.56.146, hosted on Cloudflare’s network (AS13335) in the US. No SSL certificate was issued, and the observed page title was 'JTO Token - Shape the Future of Jito | Jito Foundation'. The Gridinsoft trust score for the domain is 0 out of 100, reinforcing its fraudulent classification.

Users who interacted with jito-network.net should immediately revoke any token approvals granted through the site and transfer funds to a new wallet. If credentials were entered, change passwords for associated accounts, enable two-factor authentication, and monitor for unauthorized activity. Report the domain to Discord’s official abuse channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.