kidjupiter[.]xyz

PhishDestroy identifies kidjupiter.xyz as an active Jupiter brand impersonation site. This domain is currently engaged in phishing operations targeting users familiar with the Jupiter brand, attempting to harvest credentials or deliver malware under false pretenses. The threat is ongoing and poses immediate risk to unwary visitors.

This domain was flagged by 9 of 95 VirusTotal security vendors and listed on 1 blocklist. It resolves to 185.199.109.153, is registered through Porkbun, LLC, and was created on October 16, 2025. The SSL certificate was issued by Let's Encrypt and the domain is flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category.

Users are advised to block access to kidjupiter.xyz immediately. Enterprise environments should add the domain and associated IP to firewall and DNS blocklists. Avoid visiting the site and report it through local phishing portals if possible. Monitor for any credential reuse across systems linked to Jupiter services.