lossesback-pumps[.]fun

This domain, lossesback-pumps.fun, presents itself as an official Pump.fun cashback portal, falsely promising users 30% reimbursement for losses incurred from rug pulls. The site is designed to deceive visitors into believing they are interacting with a legitimate recovery service, when in reality it is a brand impersonation scheme. Such fraudulent pages typically harvest login credentials, private keys, or financial details under the guise of processing refunds, exposing victims to account takeovers or direct theft of funds. Analysis indicates this domain is a confirmed threat based on multiple technical and reputational indicators. It was registered on June 04, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 104.21.71.165 and is flagged by 5 out of 95 security vendors on VirusTotal, including detections for phishing and fraud. Additionally, it appears on four security blocklists and has been referenced in two AlienVault OTX threat intelligence pulses, further corroborating its malicious nature. The site was hosted behind Cloudflare, utilizing HTTP/3 and Cloudflare Browser Insights, which are common among threat actors seeking to obscure infrastructure and evade detection. If you visited lossesback-pumps.fun or interacted with its content, immediate action is required to mitigate risk. Disconnect any connected wallets or sessions and revoke permissions for any suspicious smart contracts or browser extensions. Scan your device for malware, as phishing sites may deploy additional payloads. Monitor linked accounts for unauthorized transactions and enable multi-factor authentication where possible. Report the domain to relevant platforms, including cryptocurrency wallet providers and security communities, to assist in broader takedown efforts. Given the domain’s elevated risk level and confirmed offline status, remain vigilant for similar scams targeting the same brand or user base.