# cashbackpump.com — SUSPICIOUS

> cashbackpump.com hosts a Pump.fun brand impersonation phishing page. 1/95 vendors flagged it; generated on March 17, 2026. Check the full report.

## Summary
PhishDestroy identifies cashbackpump.com as an actively deployed phishing site impersonating Pump.fun to steal user credentials and funds. The domain’s landing page mimics Pump.fun’s branding and advertises a fake cashback program promising a percentage back on losses, a common lures used by scammers to harvest wallet passphrases or API keys. Any interaction with the page risks immediate loss of crypto assets held in connected wallets because the site’s interface is designed to look identical to Pump.fun’s real interface.

This domain was flagged on 1/95 VirusTotal security vendor detections and was registered through Hello Internet Corp on March 17, 2026. It resolves to IP address 188.114.96.3 and obtained an SSL certificate from Let’s Encrypt to appear legitimate. Scammers often use newly minted domains with valid SSL certificates to sidestep browser warnings and lure users into entering sensitive information on lookalike login or withdrawal pages. Because the domain is only a few days old, its reputation has not yet propagated across blocklists, making it especially dangerous.

If you visited cashbackpump.com or entered any credentials on the page, disconnect your wallet immediately and revoke any connected app permissions through your wallet’s settings. Scan your device with a reputable antivirus and change any reused passwords. Report the domain to your antivirus vendor and to the real Pump.fun support channel so the team can add it to their takedown list. Enable two-factor authentication on your real Pump.fun account and avoid following links in unsolicited messages or advertisements promising cashback or giveaways.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Pump.fun
- Page title: Pump.fun Cashback - Get % Back on Your Losses

## Domain Intelligence
- Registered: 2026-03-17 13:12:54
- Registrar: Hello Internet Corp
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a9f1eeb9-06b7-4ac5-8358-9c2be2d8ebb8
- PhishDestroy: https://phishdestroy.io/domain/cashbackpump.com/
- LLM endpoint: https://phishdestroy.io/domain/cashbackpump.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cashbackpump.com/
Last updated: 2026-03-25