vote-giza-net[.]pages[.]dev

The domain vote-giza-net.pages.dev has been identified as a high-risk credential theft site. It currently has no known branding associated with a legitimate entity, which raises concerns about potential impersonation. There is no indication of a specific drainer kit being utilized at this time, but the threat level remains significant given the ongoing operation of the site.

Technical indicators for vote-giza-net.pages.dev indicate a VirusTotal score of 1/95, highlighting its potential danger despite limited vendor detection. The domain is registered through Cloudflare Pages and resolves to the IP address 172.66.47.104. The creation date for this domain is November 24, 2025, and it appears on 4 security blocklists. The presence on these lists includes PhishDestroy, MetaMask, ScamSniffer, and SEAL, indicating prior recognition of its malicious intent.

As of now, vote-giza-net.pages.dev remains active with no sign of takedown, continually posing a risk to users. Security professionals are advised to monitor this domain closely and implement blocking measures to prevent user exposure. Users should exercise caution and refrain from engaging with this domain to mitigate the risk of credential theft.