claimfees-pumps[.]fun

The domain claimfees-pumps.fun was registered on June 5, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and currently resolves to IP 172.67.129.63, which belongs to AS13335 Cloudflare, Inc. in the United States. The site presents a TLS certificate issued by Google Trust Services under the WE1 authority, and its authoritative nameservers are troy.ns.cloudflare.com and zoe.ns.cloudflare.com. The HTTP response returns status 200 and the page title reads “Pump.fun Cashback | Get 30% Back on Rug Pull Losses,” indicating a brand‑impersonation attempt targeting Pump.fun. Analysis of the underlying code identifies a Seed Phrase Phishing kit, and VirusTotal records show 13 of 91 security vendors flagging the domain. The infrastructure is already listed on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL, reflecting a high‑risk classification. While the page content has not been independently verified beyond the title, the observed indicators confirm active malicious use. Defenders should block the domain at network and endpoint layers, monitor for related Cloudflare‑associated IP activity, and update detection rules to include the identified kit and brand references.