# kidjupiter.xyz — MALICIOUS > kidjupiter.xyz exposed as active Jupiter brand impersonation phishing site flagged by 9 VirusTotal vendors. Check the full report. ## Summary PhishDestroy identifies kidjupiter.xyz as an active Jupiter brand impersonation site. This domain is currently engaged in phishing operations targeting users familiar with the Jupiter brand, attempting to harvest credentials or deliver malware under false pretenses. The threat is ongoing and poses immediate risk to unwary visitors. This domain was flagged by 9 of 95 VirusTotal security vendors and listed on 1 blocklist. It resolves to 185.199.109.153, is registered through Porkbun, LLC, and was created on October 16, 2025. The SSL certificate was issued by Let's Encrypt and the domain is flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category. Users are advised to block access to kidjupiter.xyz immediately. Enterprise environments should add the domain and associated IP to firewall and DNS blocklists. Avoid visiting the site and report it through local phishing portals if possible. Monitor for any credential reuse across systems linked to Jupiter services. ## Threat Details - Verdict: MALICIOUS - Site status: unknown (HTTP ?) - Target brand: Jupiter ## Domain Intelligence - Registered: 2025-10-16 16:44:02 - Registrar: Porkbun, LLC - IP: 185.199.109.153 ## Detection Status - VirusTotal: 9 vendors flagged - Google Safe Browsing: FLAGGED - Blocklists: 1 hits Lists: ["InversionDNS"] ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/4c0ab90b-8bfd-46db-9dce-a7e12ec347b6 - PhishDestroy: https://phishdestroy.io/domain/kidjupiter.xyz/ - LLM endpoint: https://phishdestroy.io/domain/kidjupiter.xyz/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/kidjupiter.xyz/ Last updated: 2026-03-26