cashbacks-pump[.]fun

The domain cashbacks-pump.fun was identified as a brand impersonation threat, specifically targeting the legitimate Pump.fun platform. This phishing domain attempted to deceive users with a fraudulent cashback scheme, promising '30% Back on Your Losses' to lure victims into providing sensitive information. The domain is currently offline, mitigating immediate risk, but it serves as a reminder of the persistent threat of brand impersonation in the cryptocurrency and DeFi sectors.

Technical analysis reveals that cashbacks-pump.fun resolves to IP address 104.21.80.57 and was registered through Dynadot LLC on February 25, 2026. It appears on three security blocklists and was flagged by 1 out of 95 VirusTotal security vendors. The domain uses an SSL certificate issued by Let's Encrypt (E7), which is common among both legitimate and malicious sites, providing no inherent trustworthiness. The page title 'Pump.fun Cashback - Get 30% Back on Your Losses' is a clear attempt to impersonate the Pump.fun brand and exploit user trust.

Given that cashbacks-pump.fun has been taken offline, the immediate threat is neutralized. However, users should remain vigilant against similar domains that may emerge. PhishDestroy recommends avoiding any unsolicited offers of cashbacks or bonuses, especially those requiring login credentials or wallet access. Always verify domain authenticity by checking official sources and be cautious of domains with recent creation dates and low trust scores. If you have interacted with this domain, change your passwords and enable two-factor authentication on affected accounts immediately.