jupiter[.]wunschpunsch[.]fun

The domain jupiter.wunschpunsch.fun has been identified as a high-risk brand impersonation threat targeting the brand Jupiter. Analysis indicates that this domain was used to deceive users into believing they were interacting with legitimate Jupiter services, potentially leading to the theft of sensitive information or financial loss.

Infrastructure analysis reveals that jupiter.wunschpunsch.fun resolves to the IP address 82.223.103.158 and was registered through IONOS SE on May 19, 2026. The domain is flagged by Google Safe Browsing for social engineering and appears on 3 security blocklists. VirusTotal reports that 9 out of 95 security vendors detect this domain as malicious, and it has a Gridinsoft trust score of 0/100. The technologies detected on this domain include Caddy and HTTP/3, which are commonly used for web server and protocol operations, respectively.

As of the latest assessment, the domain is currently offline, which has reduced the immediate risk to users. However, it remains important to monitor for any reactivation or related phishing infrastructure. Users and organizations should continue to exercise caution when encountering unsolicited communications or links that purport to be from Jupiter, and should verify the authenticity of any such interactions through official channels.