Is list-votesokx.pages.dev a scam? TrustSniffer's high-risk assessment: 20/100

list-votesokx.pages.dev
Download PDF Check another site How we score

Verdict

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

20 OUT OF 100
Critical Risk

list-votesokx.pages.dev shows high-risk / scam indicators.

Sensitive Interaction Risk Governance Risk

Assessed 2026-10-27 by automated analysis. Classification confidence 55%.

Evidence status and limitations

Evidence completeness: Not recorded

  • The real-world operator identity was not independently verified.
  • Module-level completeness metadata is unavailable for this legacy report.

At a glance

The checks that decide most of this verdict.

Malware engines2 flagged itVirusTotalRisk
Google Safe BrowsingNot listedGoogleClear
Abuse reports on the host0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reportsClear
Domain ageNot availableNo registration record was returnedNoted
CertificateEncrypted connectionIssued by WE1Noted
Hosted byCLOUDFLARENETServer in USNoted

The page as captured

https://list-votesokx.pages.dev/
Screenshot of the list-votesokx.pages.dev homepage captured during the TrustSniffer assessment
What list-votesokx.pages.dev served when TrustSniffer captured it on 2026-10-27. The page may look different now.

Key findings

  • Automated classification: Sensitive Interaction Risk.
  • At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

Full analysis

Overview

This website is a single-page "Token Voting" service titled "Vote on Crypto Listings". It invites visitors to vote on which crypto tokens should be listed, which is a community-engagement pitch aimed at crypto audiences. It runs on a free, shared hosting subdomain rather than a dedicated domain, and its short homepage presents no recognizable operating brand. Its apparent purpose is to draw crypto-interested visitors into a voting interaction.

Scam/Impersonation Risk

This site carries an elevated risk. It is blacklisted by external threat-intelligence sources, and several independent detection engines flag it as malicious or suspicious. That is a confirmed contradiction and the decisive factor in this assessment. No conflicting legal identities, brand impersonation or page-level phishing artifacts were observed, so the concern comes from reputation listings rather than from on-page content. Browser-behaviour testing found no wallet-connection prompts, wallet-drainer behaviour, clipboard manipulation, hidden forms, credential forms posting off-site, or content cloaking. Even so, the homepage made several data submissions (POST requests) to external, non-allow-listed destinations in every test run. A "vote on listings" mechanic is a common lure for crypto audiences, and these off-site submissions mean data entered or generated on the page may leave the site's own control. The throwaway hosting address and the listing-vote theme together fit a high-risk archetype, so the listings should be treated as credible until delisted. Evidence:

  • Homepage reputation: external threat-intelligence checks returned two malicious and two suspicious detections, and the domain also appears on an external blacklist.
  • Homepage behaviour: three external POST requests to non-allow-listed destinations occurred across three successful test runs, with roughly 39% of observed requests going to third-party hosts.
  • Homepage behaviour: no wallet-provider interaction, clipboard writes, hidden forms or suspicious inline scripts were detected.
  • Homepage content: the page is titled "Token Voting | Vote on Crypto Listings" and carries no named operator.

Regulatory Verification Notes

The captured content shows no licence, registration number or named legal entity. For a site inviting crypto-related participation, this is a verification gap rather than evidence of wrongdoing on its own. The operator's real-world identity is not independently established, so no claim of legitimacy can be sustained. Registration details for the domain are incomplete, which is an ownership-opacity limitation rather than an identity contradiction. No match was found in the third-party broker reputation dataset, so no external regulatory or reputational context is available either way. The site's transport encryption is valid, but a domain-validated certificate only proves control of the hostname, not the legitimacy of its operator. Evidence:

  • Homepage: no licensing, registration or company disclosure is present in the captured content.
  • Hosting: served from AS13335 (Cloudflare, Inc., US), which says nothing about who operates the site.
  • Transport encryption: the TLS certificate was issued by WE1 (DV, domain-validated only) and is valid to 2026-12-31, with 65 days remaining.
  • Third-party broker dataset: no match.

What to Verify Next

Any project that this voting page claims to represent or serve should be asked directly, through its officially published channels and not through links on this site. The questions are whether the project operates the voting page and whether it has ever run a token-listing vote. Anyone who still wants to assess the site should wait for the external detections to be cleared, or re-checked against several independent reputation services, before treating the listings as resolved. Any claimed licence, registration or operating company should be confirmed in the relevant public registry, and a name appearing only on this site should not be relied on. Official support and contact channels should be confirmed through an independent route. Evidence:

  • Homepage: the voting mechanic and listing claims are not tied to any identifiable project or entity.
  • Reputation: the current malicious and suspicious detections are the main item to re-check for delisting.
  • Registry check: no licence or registration reference exists in the captured content to check against.

Summary Verdict

The overall posture is high risk. Confirmed adverse reputation listings outweigh the benign technical hygiene and the clean behavioural tests. The operator's identity is not established, and the evidence gives no basis for treating the site as legitimate.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge nodes, so the origin server was not observable. Infrastructure of this kind is a mitigating factor only. It does not offset the reputation risk, and the edge-only view prevents independent hosting verification and can mask rapid content changes. The certificate is valid and issued by a recognized authority, and the hosting network is a mainstream provider with no abuse reports against its address.

Closing Assessment

The site should be treated as read-only at most. No wallet should be connected and no transaction signed. No credentials or personal data should be submitted, and no payment or token interaction should occur until the external listings are cleared and an official project confirms its involvement.

Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report.

What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

01 External reputation

  • Several malware engines flagged this domain.External reputation rule:EXT_BLACKLIST_HIGH

02 Behaviour in a sandbox

  • The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox rule:BEHAV_NONWHITELISTED_POSTS

03 Registration and ownership

  • The public registration record for this domain is incomplete.Registration and ownership rule:KF_WHOIS_INCOMPLETE

Identity verification

StatusUNKNOWN
Identity score50/100
Identity verification confidence30%
  • AI page analysis unavailable (page captured; identity not AI-verified)

Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.

What TrustSniffer observed

First-party facts recorded during the assessment of list-votesokx.pages.dev.

  • The request stayed on list-votesokx.pages.dev. It was not redirected to another domain. Clear
  • It is hosted on CLOUDFLARENET, from a server in US. Noted

Domain intelligence

RegistrarNot available
HostingCLOUDFLARENET - Cloudflare, Inc., US
CountryUS
Server IP2606:4700:310c::ac42:2cb5
Name serversNot available
CDN / edge networkDetected (cloudflare)
Resolved IP addresses4
Edge IP addresses4
Likely origin IP addresses0
SSL issuerWE1
SSL expiry2026-12-31
Domain ageNot available (no registration date was returned)
Domain expiryNot available
Archive first seenNot available
Archive snapshotsNot counted (archive lookup incomplete)
ReputationVirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches

About this assessment

A trust score summarises the evidence TrustSniffer could collect about list-votesokx.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

Already paid or signed in? Do this now

Act fast. The sooner your bank knows, the better the chance of stopping the payment.

  1. Call your bank or card company now. Use the number on the back of your card. Ask them to stop or reverse the payment.
  2. Paid with crypto? Contact the exchange or wallet app you sent it from today. Give them the address you paid.
  3. Signed in or shared a password? Change it now, on every site where you use it, and turn on two-step sign-in.
  4. Report it to the police. In the US you can also report at reportfraud.ftc.gov and ic3.gov. In other countries, use your national police or fraud reporting service.
  5. Keep the evidence. Save screenshots, receipts, emails and chat messages. Your bank and the police will ask for them.
  6. Ignore anyone who offers to get your money back for a fee. These "recovery" offers are often a second scam.

Looking for the real site? Type the company name into a search engine yourself, or use the web address printed on your card, bill or letter. Do not use links from messages or ads.

Common questions about list-votesokx.pages.dev

Is list-votesokx.pages.dev a scam?

TrustSniffer's assessment of list-votesokx.pages.dev found strong scam indicators. It scored 20 out of 100 on 2026-10-27, which is the critical-risk band. The specific signals are listed in the evidence above.

Is list-votesokx.pages.dev safe to use?

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

What is the trust score of list-votesokx.pages.dev?

list-votesokx.pages.dev scored 20 out of 100 on 2026-10-27, which places it in the critical-risk band. The score is built from the domain's age and registration history, its hosting and certificate, the content of the site itself, and third-party reputation data. There is no human rating and no user review in it.

Download this report as PDF Free, no account needed. Create one to keep a history of the sites you check.
By AminRez, Founder & Lead Security Researcher, TrustSniffer
Produced by the TrustSniffer Analysis Engine · assessed 2026-10-27 · how we assess · report a mistake