peopleschoice[.]pages[.]dev

PhishDestroy has identified peopleschoice.pages.dev as an active, under-investigation threat classified as generic phishing. This domain is currently live and attempting to deceive users with a Wallet DApp interface, a common lure for cryptocurrency wallet credential theft. The risk level is elevated due to its active status and presence on a security blocklist, despite not yet being widely flagged.

Technical analysis reveals that peopleschoice.pages.dev resolves to IP address 172.66.46.237 and was registered through Cloudflare, Inc. with a creation date of April 04, 2026—a concerningly recent registration typical of phishing campaigns. The site uses a Let's Encrypt/E7 SSL certificate, which provides a false sense of security. VirusTotal scans show 0 out of 95 vendors detecting it, meaning it has not been widely recognized as malicious yet. However, it already appears on 1 security blocklist, and PhishDestroy's investigation using seed 943bd2 confirms its phishing intent.

Users encountering peopleschoice.pages.dev should not interact with it. Never enter wallet credentials, private keys, or seed phrases into such a site. If you have already done so, immediately transfer assets to a new wallet and revoke any permissions. Report the domain to your browser's security tools and to Cloudflare's abuse department. Stay vigilant against phishing sites that mimic legitimate wallet interfaces.