pfee[.]fun

pfee.fun poses an elevated risk of brand impersonation, specifically targeting the brand Pump.fun. The domain appears to mimic the legitimate website by using a similar domain name and page title, 'pump.fun fees,' which could mislead users into believing they are interacting with a genuine service. This deceptive practice is designed to collect sensitive information, such as login credentials or financial details, from unsuspecting visitors.

Analysis indicates that pfee.fun has been flagged by 7 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection within the security community. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 18, 2026. It has been taken offline and is currently blocked by three security blocklists, including MetaMask, PhishDestroy, and SEAL. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trust. Technical indicators show the use of Chart.js, jsDelivr, HSTS, Cloudflare Browser Insights, and Cloudflare, with support for HTTP/3. These technologies can be employed to enhance the credibility and functionality of the phishing site, making it more convincing to potential victims.

If users have visited pfee.fun, they should immediately check their accounts associated with Pump.fun for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) if not already in place. Users should also monitor their financial statements for any suspicious transactions and report any issues to their financial institutions. Additionally, they should consider running a comprehensive scan of their devices to ensure no malicious software was installed during the visit.