1-39b[.]pages[.]dev

Analysis of the domain 1-39b.pages.dev shows it is actively hosting a malicious page titled "MemeCoin Generator | CoinFactory" and is classified as a crypto drainer. The site was registered on May 01, 2026 through Cloudflare, Inc. and resolves to the Cloudflare‑provided address 188.114.97.3, which is located in Canada. The server presents a TLS certificate issued by Google Trust Services under the WE1 brand and enforces HSTS, while also supporting HTTP/3. DNS resolution uses the Cloudflare authoritative nameservers dan.ns.cloudflare.com and poppy.ns.cloudflare.com. The domain is currently listed on one security blocklist and has been blocked by the PhishDestroy feed. Gridinsoft assigns a trust score of 0 / 100, indicating a high likelihood of malicious intent. HTTP requests return a 200 status, confirming the page is reachable. The site has been scanned by 91 vendors on VirusTotal, none of which flagged it, but the absence of detections does not constitute verification of safety. Uncertainties remain regarding the exact payload delivered to victims and any additional infrastructure beyond the visible Cloudflare edge. Defenders should block the domain at network perimeter, monitor DNS queries for 188.114.97.3, and advise users that any interaction with the "MemeCoin Generator" interface may result in unauthorized cryptocurrency transfers. Continuous observation is recommended until the investigation concludes.