claimfee-pump[.]fun

PhishDestroy identifies claimfee-pump.fun as a brand-impersonation domain actively targeting users of the legitimate Pump.fun platform in an effort to harvest cryptocurrency deposits. This malicious site mimics the branding and interface of Pump.fun to deceive visitors into connecting wallets or transferring tokens under the guise of a “claim fee” or similar fraudulent offer. The threat actor leverages urgency and familiarity to trick users, especially those familiar with Pump.fun’s launchpad ecosystem, into surrendering control of assets or revealing private keys. This domain was flagged by PhishDestroy after technical analysis revealed several red flags: it resolves to IP address 172.67.202.156 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 05, 2026—just days ago. Despite zero detections on VirusTotal (3/95 engines as of capture), the domain remains untrusted and carries active status within PhishDestroy’s seed 0ce9d7. The SSL certificate issued by Google Trust Services provides a false sense of legitimacy, a common tactic in modern crypto-scam operations. Users who have visited claimfee-pump.fun or entered any information should immediately disconnect their wallet, revoke any unauthorized permissions via tools like Revoke.cash, and scan devices for malware. Never interact with unexpected links claiming to offer “fees” or “rewards” from Pump.fun. Always verify URLs via official channels and use bookmarks to the real site. Report the domain to Pump.fun’s support and PhishDestroy to help block further abuse.