cashback-pump[.]com

PhishDestroy identifies cashback-pump.com as a live cashback-themed phishing domain currently under investigation. The site is serving as a lure for a generic phishing campaign attempting to harvest user credentials and payment details under the guise of cashback rewards.

This domain was flagged by zero of 95 VirusTotal vendors as of the latest scan, indicating it remains undetected by most signature-based defenses. It was registered through Dynadot Inc on March 18, 2026, and resolves to IP address 193.233.82.10. Despite its recent creation and clean reputation indicators, this domain has not been widely blocklisted and maintains neutral to low trust scores across threat intelligence platforms. The mismatch between its use as a phishing vector and current detection gaps presents a significant window of opportunity for attackers to compromise unsuspecting users.

Given the active status and low detection coverage, PhishDestroy recommends immediate addition to network and endpoint blocklists. Organizations should isolate or block traffic to 193.233.82.10 and the domain cashback-pump.com at the firewall, proxy, and DNS levels. Users should be alerted via security awareness training to avoid clicking on unsolicited cashback offers, especially those involving financial rewards or too-good-to-be-true deals. Security teams are advised to monitor for any inbound or outbound connections to the indicted IP and inspect for signs of credential harvesting or payment fraud. DNS sinkholing may be implemented as a proactive countermeasure until the campaign subsides or the domain is sinkholed by hosting providers.