tradeback-pumps[.]fun

This domain, tradeback-pumps.fun, presents a high-risk brand impersonation scheme targeting users of Pump.fun, a platform associated with cryptocurrency projects. The site falsely advertises a 30% cashback offer for losses incurred from rug pulls, a common scam tactic in the crypto space. Such schemes exploit user trust by mimicking legitimate services to harvest credentials, private keys, or direct cryptocurrency transfers under the guise of refunds or compensation. The deceptive nature of this offer is designed to manipulate victims into disclosing sensitive information or sending funds to attacker-controlled wallets, leading to financial loss or account compromise. Analysis indicates that tradeback-pumps.fun was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with abusive domains. The domain resolves to the IP address 104.21.66.83 and employs Cloudflare services, which are often leveraged to obscure malicious infrastructure. Detection metrics further confirm its malicious intent: the domain appears on 4 security blocklists, including MetaMask, PhishDestroy, SEAL, and Maltrail. Additionally, 15 out of 95 security vendors on VirusTotal flag the domain as malicious, while AlienVault OTX lists it in 3 threat intelligence pulses. The Gridinsoft trust score of 0/100 underscores its classification as a confirmed threat. Users who visited tradeback-pumps.fun or interacted with its content should take immediate action to mitigate potential risks. First, cease all communication with the site and avoid clicking any links or downloading files from it. If cryptocurrency transactions were initiated, attempt to revoke approvals for any suspicious smart contracts using a blockchain explorer or wallet interface. Monitor connected accounts for unauthorized activity and enable multi-factor authentication where available. Report the incident to relevant platforms and consider filing a complaint with local cybercrime authorities or cryptocurrency fraud reporting services. Regularly review wallet addresses and transaction histories to detect any anomalous behavior.