jito-sol[.]pro

Analysis of the domain jito-sol.pro shows a short‑lived infrastructure that was created on February 27, 2026 and is currently taken offline. The site presented the page title "Jito Staked SOL | AirDrop", indicating an attempt to lure victims with a cryptocurrency airdrop promise. Registration was performed through PDR Ltd. d/b/a PublicDomainRegistry.com and the authoritative name servers are diana.ns.cloudflare.com and johnny.ns.cloudflare.com, both operated by Cloudflare. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States.

No SSL certificate was observed for the host, meaning the site was served over plain HTTP. The domain appears on three security blocklists and has been flagged by at least one of ninety‑three VirusTotal scanners, confirming malicious intent. Independent blocklist providers PhishDestroy, MetaMask, and SEAL have also listed the domain as malicious. The observed phishing kit is identified as an "Airdrop Scam" and the overall threat category is a crypto‑focused scam.

Evidence beyond the page title, registration details, DNS data, blocklist listings, and the single VirusTotal detection is not publicly available, leaving the exact content of the page unverified. Defenders should immediately deny any network traffic to 188.114.96.3, add jito-sol.pro to URL filtering and DNS sinkhole rules, and monitor for newly registered domains that reuse the same registrar or Cloudflare name servers with similar naming patterns. Continuous threat‑intel feeds should be consulted for any resurgence of the domain or related infrastructure, and users should be warned that any unsolicited Jito‑related airdrop offers are likely fraudulent.