Phantom will show "This dApp could be malicious" and "Domain is new" because pegd.pages.dev is not yet in Phantom's verified registry. This is normal for any new site.

"Failed to simulate" is also expected — token creation transactions are complex and Phantom cannot pre-simulate them. This does not mean the transaction will fail.

Click Confirm (unsafe) on both popups to proceed. You will see two Phantom approval requests — TX 1 creates the token, TX 2 distributes the supply.