jitoxai[.]com

The domain jitoxai.com was registered on October 18, 2025 through NameCheap, Inc. and resolves to the IP address 63.250.43.136, which is hosted in the United States under ASN 22612 (Namecheap, Inc.). The site presents a TLS certificate issued by Let’s Encrypt (certificate identifier E8) and advertises modern web stacks including Framer Sites, React, HSTS, and HTTP/3. A page title retrieved from the live endpoint reads “JitoX AI Mev Bot Solana -JitoX AI Mev Bot Solana”, and the HTTP response currently returns a 404 status, indicating that the content is no longer served. The domain is listed on a single security blocklist and is actively blocked by PhishDestroy.

VirusTotal analysis shows that 4 of 95 scanning engines flagged the domain as malicious, aligning with its classification as a crypto‑scam that impersonates the Solana brand. Nameserver records point to dns1.registrar-servers.com and dns2.registrar-servers.com. The infrastructure, registration details, and detection signals collectively suggest a purposeful attempt to lure Solana users or investors into a fraudulent scheme, likely leveraging the “JitoX AI Mev Bot” phrasing to convey legitimacy.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms, as the site now returns 404 and no further content has been captured. Defenders should continue to block jitoxai.com at perimeter controls, monitor for any DNS or SSL certificate changes, and update threat intelligence feeds with the observed indicators. Analysts should also watch for related domains that share the same registrar, hosting ASN, or similar page‑title patterns, as these may represent additional components of the same campaign.