# final-cashback.pro — MALICIOUS

> final-cashback.pro is a crypto drainer phishing site impersonating cashback services. Blocked by 10/95 VirusTotal scanners since March 26, 2026.

## Summary
PhishDestroy identifies final-cashback.pro as an active crypto drainer phishing domain designed to steal cryptocurrency from unsuspecting users. This malicious site masquerades as a legitimate cashback service, luring victims with promises of rewards while secretly deploying crypto-draining malware. Once users connect their wallets or enter sensitive credentials, the drainer initiates unauthorized transactions, siphoning funds to attacker-controlled addresses. Security researchers have flagged this domain for its deceptive tactics and direct association with cryptocurrency theft campaigns, making it a high-risk threat to wallet security.  This domain was flagged by PhishDestroy as an elevated-risk crypto drainer after analysis revealed multiple indicators of compromise. Registered through Global Domain Group LLC on March 26, 2026, final-cashback.pro already appears on two security blocklists, including blocks enforced by MetaMask and SEAL. The domain resolves to IP address 188.114.97.3 and holds a valid SSL certificate issued by Let’s Encrypt, which it uses to appear legitimate. VirusTotal reports 10 out of 95 security vendors already detect this domain as malicious, underscoring its widespread threat posture and prompt identification by the security community.  If you visited final-cashback.pro, disconnect your wallet immediately and revoke any token approvals using tools like Revoke.cash or your wallet’s built-in security features. Reset account passwords if you entered credentials, enable two-factor authentication where possible, and scan your devices for malware. Report the domain to PhishDestroy and your wallet provider to help shut down the operation. Never interact with unexpected cashback offers or unfamiliar crypto links — always verify independently before taking any action involving your digital assets.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-26 09:25:01
- Registrar: Global Domain Group LLC
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 10 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["MetaMask", "SEAL"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6b4996a8-2455-47c1-b9dd-41edba41b7f4
- PhishDestroy: https://phishdestroy.io/domain/final-cashback.pro/
- LLM endpoint: https://phishdestroy.io/domain/final-cashback.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/final-cashback.pro/
Last updated: 2026-03-28