votes-pieverses-net[.]pages[.]dev

The domain votes-pieverses-net.pages.dev is currently active and poses a significant phishing threat, particularly targeting users of Pieverse. Despite being flagged by only 1 out of 95 vendors on VirusTotal, the domain is listed on four public blocklists, including those maintained by PhishDestroy, MetaMask, ScamSniffer, and SEAL. This highlights its malicious intent even though it evades broader detection.

Registered through Cloudflare, Inc. and hosted on IP address 188.114.96.3, the website uses an SSL certificate issued by Google Trust Services / WE1, which may lend it an appearance of legitimacy. However, its platform risk score of 83 out of 100 indicates a high level of threat. The domain's creation date is listed as November 24, 2025, with PhishDestroy first detecting it on May 25, 2026, suggesting it has been active for several months.

The site's page title, "Pieverse Timepot," suggests it may be attempting to impersonate or exploit the Pieverse brand, potentially luring users into divulging sensitive information. The low detection rate on VirusTotal underscores the importance of early detection systems like PhishDestroy, which can identify threats before they are widely recognized by antivirus databases. This domain exemplifies how phishing operations can exploit the gap between domain registration and detection to target unsuspecting users effectively.