new222223132[.]pages[.]dev

The domain new222223132.pages.dev is currently active and associated with a high-risk phishing campaign targeting cryptocurrency users. Analysis indicates the site impersonates a meme coin generator, specifically branded as "MemeCoin Generator | CoinFactory," likely designed to function as a crypto drainer. This infrastructure is engineered to deceive users into connecting wallets or entering private keys, enabling unauthorized fund transfers. Infrastructure analysis reveals the domain was registered through Cloudflare Pages on March 27, 2026, and resolves to the IP address 172.66.46.246, located in Canada under Cloudflare, Inc. Detection metrics show the domain is flagged by 1 of 95 security vendors on VirusTotal, while appearing on a single security blocklist. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious Cloudflare-hosted domains. The low detection count suggests either recent deployment or evasion techniques to bypass automated security systems. As of this report, the domain remains operational and unmitigated. Users are advised to treat any interaction with new222223132.pages.dev as malicious. Network administrators should implement blocking rules for the domain and its resolving IP (172.66.46.246) at the perimeter level. Cryptocurrency wallet providers and exchange platforms are recommended to monitor for connections originating from this domain and alert users attempting to authorize transactions. Given the domain's recent registration and low detection rate, heightened vigilance is warranted for similar patterns involving Cloudflare Pages infrastructure.