kylieplays[.]com

PhishDestroy identifies kylieplays.com as an active credential theft phishing domain designed to impersonate Kylie Jenner’s brand and harvest user login credentials. The site leverages spoofed branding and fake authentication forms to trick visitors into surrendering sensitive account details. Users who interact with this domain risk direct exposure of email, social media, or payment account credentials to threat actors.

This domain was flagged by PhishDestroy with 0 detections on VirusTotal out of 95 engines, indicating it remains undetected by most antivirus platforms. The domain uses a valid Let’s Encrypt SSL certificate to appear legitimate and is currently hosted on an unlisted infrastructure. While the creation date and registrar information are not yet available in public feeds, the absence of blocklist coverage suggests a recently deployed campaign.

If you visited kylieplays.com, do not enter any login credentials or personal information. Immediately change passwords for any accounts you may have entered, enable two-factor authentication, and scan connected devices for malware. Report the domain to your email provider or platform support team. Avoid clicking links in unsolicited messages or social posts referencing this domain. Monitor financial and account activity closely for signs of unauthorized access. For verified official communications, visit kylie.com directly.