pump-fees[.]live

PhishDestroy investigates pump-fees.live as an active crypto drainer targeting Solana wallet users by mimicking the Pump.fun platform. This domain displays a deceptive page titled 'View on Pump' to trick victims into connecting their wallets and signing malicious transactions, resulting in fund theft. The site utilizes obfuscated JavaScript to execute drainer logic upon wallet connection, making it a high-risk threat to cryptocurrency holders. pump-fees.live exhibits multiple red flags detected in our forensic analysis. The domain resolved to IP 188.114.97.3 and was registered on April 20, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. VirusTotal analysis shows only 2 out of 95 security vendors flagged the site, while it appears on 2 established blocklists including Google Safe Browsing (GSB) and MetaMask's phishing detection system. Blocked by MetaMask and SEAL, this domain demonstrates consistent malicious behavior despite its low VT detection rate. Despite its discovery and blocking by major security tools, pump-fees.live remains active with an elevated risk level. PhishDestroy's continuous monitoring confirms regular malicious activity through connection to drainer infrastructure. Users should avoid this domain entirely and verify any similar sites through PhishDestroy's verification tool. The remaining risk for unwary cryptocurrency users remains high due to the domain's active status and drainer functionality.