pump-helpe[.]fun

This domain, pump-helpe.fun, operates as a brand impersonation threat specifically targeting users of Pump.fun, a decentralized platform for token launches. The site falsely advertises a 30% cashback on rug pull losses, exploiting recent incidents involving the legitimate service to deceive victims into disclosing wallet credentials or transferring funds. The page title, 'Pump.fun Cashback | Get 30% Back on Rug Pull Losses,' directly mimics the branding and tone of Pump.fun, increasing the likelihood of successful social engineering attacks against users seeking compensation or recovery options.

Analysis indicates the domain was registered on February 25, 2026, through Global Domain Group LLC, a registrar frequently associated with high-risk domains. It resolves to the IP address 77.105.161.240 and is flagged by 2 out of 95 security vendors on VirusTotal, while appearing on four distinct security blocklists. The Gridinsoft trust score for this domain is 0/100, further confirming its malicious classification. The domain has been proactively blocked by multiple security frameworks, including MetaMask, PhishDestroy, SEAL, and Maltrail, which categorize it as a phishing or fraudulent resource.

Users who visited pump-helpe.fun or interacted with its content should immediately revoke any connected wallet permissions and transfer assets to a new, secure wallet address. It is critical to scan local devices for malware, as phishing sites may deploy additional payloads. Monitor financial transactions for unauthorized activity and report the incident to relevant security teams or platforms. If credentials were entered, assume they are compromised and update all associated passwords or authentication methods. Avoid engaging with similar cashback or recovery offers that lack verification from official sources.