checks-pump[.]fun

This domain, checks-pump.fun, is a high-risk brand impersonation attempt targeting users of the legitimate crypto platform, Pump.fun. The domain is designed to deceive users into believing they are interacting with a genuine service, potentially leading to the loss of sensitive information and financial assets. The page title, 'Pump.fun Cashback | Get 30% Back on Rug Pull Losses,' suggests that the domain is attempting to exploit the trust of users who may have suffered losses from rug pulls, a common scam in the cryptocurrency space.

Analysis indicates that checks-pump.fun is flagged by 13 out of 95 security vendors on VirusTotal, a platform that aggregates data from multiple antivirus and security services. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 12, 2026, and resolves to the IPv6 address 2a06:98c1:3120::3. Additionally, the domain appears on four security blocklists, including those maintained by MetaMask, PhishDestroy, SEAL, and Maltrail, further emphasizing the high risk associated with it. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to users.

If users have visited checks-pump.fun, they should immediately check their accounts for any unauthorized activity and consider changing their passwords. It is also advisable to enable two-factor authentication (2FA) on all relevant accounts and monitor for any signs of phishing, such as unexpected login attempts or unusual transactions. Users should report any suspicious activity to their financial institutions and to the official Pump.fun support team to ensure their security and to help prevent further exploitation.