[SCAM] Fake Jito Staking Website – Wallet Draining Attempt

[albon]

What happened:: This member posted a topic in the Altcoin Discussion section about the Jito project and included a malicious link unrelated to the official project. The link is intended to lure members into staking through this phishing site, which could ultimately drain their wallets.

It's worth noting that the account has already been tagged as a Merit abuser, and its last post was on January 15, 2022, and the following appears in their trust history:

- This user's email address was changed recently.

- This user recently woke up from a long period of inactivity.

- This user recently changed their password.





Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=917407 | FLAG

Reference Link:

[1] Discussing Jito: A MEV-Powered Liquid Staking Pool on Solana – Worth Trying?  
[2] jito-stake[.]com

Domain Name: JITO-STAKE.COM
Registrar:   Pdr Ltd. D/b/a Publicdomainregistry.com IANA ID 303
Status: clientTransferProhibited
Registrant Organization: Ali Baker
Registrant Email: alibaker1960@mailboxbest.xyz
Creation Date: December 23, 2025 (3 weeks ago)
Update Date: January 14, 2026 (13 hours ago)
Expiration Date:   December 23, 2026
Age: 23 days
Registrant Address: Villa 84, Beau Vallon Promenade
Registrant State/Province: Mahe
Registrant Postal Code: 000000
Registrant Phone: tel:+248.4054354208
SOURCE: https://www.domainiq.com/domain?jito-stake.com#/whois

Additional Notes:

This is the official Jito project website: www.jito.network

In contrast, the phishing domain is only 23 days old and contains wallet-connection pop-ups designed to steal users’ funds.

The scammer also included a screenshot claiming 7.59% APY, which is higher than the rate shown on the official domain, in order to lure users into connecting their wallets through the malicious link.

[albon]

New Update:

After this account, which appears to be hacked, posted a topic containing a phishing link, the following actions occurred:

1. The account that published the topic has been banned.

2. The topic has been deleted and is now archived.

3. A response was received regarding the complaint I submitted to PublicDomainRegistry, indicating that they have reviewed the report and have indeed suspended the domain. Their reply was as follows:

Hello Team,

Thank you for bringing this to our notice.

We have reviewed your complaint and, pursuant to our Terms of Service (TOS), have suspended the reported domain name 'jito-stake[.]com'. The suspension shall reflect within 4 to 6 hours.

Do let us know in case of any queries.

Regards,
Abuse Mitigation Team
PublicDomainRegistry

[$crypto$]

Reporting --- Phishing sites posted on the forum by full members whose accounts may have been hacked.

Account: superman184 please ban
Fake ANN: JitoSOL on Solana: 7-8% APY with liquid staking — who uses it?

Site phishing

Code:

jito-stakes.com

The thread has been reported just waiting for the moderators to delete it.

[albon]

Reporting --- Phishing sites posted on the forum by full members whose accounts may have been hacked.

Account: superman184 please ban
Fake ANN: JitoSOL on Solana: 7-8% APY with liquid staking — who uses it?

Site phishing

Code:

jito-stakes.com

The thread has been reported just waiting for the moderators to delete it.

This is a great catch, well done!

I checked his account and indeed the email address was recently changed, and this user recently woke up from a long period of inactivity. I strongly confirm that this account is hacked, as shown by his post history.



It's good that the moderators responded to the report and removed the thread where the phishing domain was posted. The domain is only 3 days old and was created after I reported their previous one, which was shut down.



We hope this account will be banned as well, so it doesn’t continue promoting such phishing links that could lead to stealing investors’ wallets.

Also, I will report this new domain to the registrar so it gets taken down like the previous one. Thank you again.

[Coyster]

Nice catch guys. So i believe the scammers behind this Jito staking scam are either purchasing or hacking bitcointalk accounts to push their phishing link in the forum, hoping them catch unsuspecting members with this. Sometimes all they need is just one naive person, hopefully they don't get that here.

We hope this account will be banned as well, so it doesn’t continue promoting such phishing links that could lead to stealing investors’ wallets. Also, I will report this new domain to the registrar so it gets taken down like the previous one. Thank you again.

Yes, the account would be banned. Posting phishing links is definitely an offence that should earn the perpetrator the ban hammer. That said, you do a great job reporting domains used by scammers, you mind pointing me to how you do it, so i could report the next one i find, cheers.

[albon]

Nice catch guys. So i believe the scammers behind this Jito staking scam are either purchasing or hacking bitcointalk accounts to push their phishing link in the forum, hoping them catch unsuspecting members with this.

Thank you for your input. Yes, that's correct. Even if the accounts they bought or hacked were tagged, their only goal is to promote the phishing link, which might lead some forum members to mistakenly connect their wallets to it, or that the link and thread will rank high in search engines to mislead investors of this project with the promise of high staking returns through their phishing domain.

Yes, the account would be banned. Posting phishing links is definitely an offence that should earn the perpetrator the ban hammer. That said, you do a great job reporting domains used by scammers, you mind pointing me to how you do it, so i could report the next one i find, cheers.

We hope it will be done as soon as possible.

Update:

Okay, you can first identify the domain registrar and their abuse contact email by entering the domain link on icann.org or who.is, as shown in the attached image. ^{[You can search on Google for other sites that provide WHOIS lookup services if needed.]}



The domain registrar is Eranet International Limited, and the abuse contact email is support@tnet.hk according to the registrar’s official abuse reporting procedure: https://www.eranet.com/domain/Abuse_procedure.php

After that, you can send them a message, attach this thread as evidence, provide sufficient information in your report, and then wait for their review.

You can also file a report with Google Safe Browsing and Cloudflare Abuse.