rewards-pumpfun[.]web[.]app

rewards-pumpfun.web.app is a domain that posed a brand impersonation threat by mimicking the official Pump.fun website. It was used to conduct a cryptocurrency scam, potentially tricking users into revealing sensitive information or transferring funds. The domain is currently taken offline, reducing the immediate risk to users. However, those who may have interacted with the site before it was taken down should take precautions to protect their assets and personal information.

3 of 95 VirusTotal vendors flagged this domain as malicious, including G-Data, Gridinsoft, and Trustwave. The domain was registered through Google LLC and resolves to the IP address 199.36.158.100, which is located in the US and associated with AS54113 Fastly, Inc. The site appeared on 2 security blocklists, PhishDestroy and ScamSniffer. The SSL certificate was issued by Google Trust Services / WR4, and the site utilized technologies such as Firebase, HSTS, and HTTP/3. The creation date for rewards-pumpfun.web.app is not available.

If users have interacted with rewards-pumpfun.web.app, they should revoke any token approvals and move their cryptocurrency funds to a new, secure wallet. For those who may have entered login credentials, it is crucial to change passwords immediately and enable two-factor authentication (2FA) on all affected accounts. Users should also monitor their accounts for any signs of unauthorized activity or fraud. To report this phishing site, individuals can submit the domain to platforms like PhishTank or Google Safe Browsing, and contact their financial institutions if they suspect any compromise.