pump-helped[.]fun

PhishDestroy has flagged pump-helped.fun as an elevated-risk brand impersonation threat specifically targeting users of the Pump.fun platform. This domain is designed to deceive visitors into believing they are on the legitimate Pump.fun website, while actually operating as a crypto drainer that can steal cryptocurrency assets. The page title, "Pump.fun Cashback | Get 30% Back on Rug Pull Losses," is a classic lure exploiting users' potential losses in the crypto space.

Technical indicators paint a clear picture of malicious intent. VirusTotal analysis shows that 1 out of 95 security vendors have flagged this domain, and it appears on three security blocklists. The domain was registered on February 25, 2026, through Global Domain Group LLC, a registrar with a history of hosting malicious domains. It resolves to IP address 77.105.161.240 and is secured with a Let's Encrypt SSL certificate (R12), which lends a false sense of legitimacy. The domain is currently offline, but this may be temporary.

Users who have interacted with pump-helped.fun should immediately revoke any permissions granted to the site, especially wallet approvals. Since this is a crypto drainer impersonating Pump.fun, affected users should transfer remaining funds to a new, secure wallet and run a full security scan on their devices. PhishDestroy recommends enabling two-factor authentication on all crypto accounts and monitoring for unauthorized transactions. Always verify domain names carefully before connecting a wallet or entering sensitive information.