Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
ocagent-cdn.com is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 3 months oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a very recently registered domain whose homepage carries the title "CoreX" and a short body of text. The domain name reads like a content-delivery or agent-infrastructure asset rather than a consumer brand. The homepage shows no identifiable products, pricing or business model, so its commercial purpose is unclear. It has also been flagged by external threat-intelligence sources.
Scam/Impersonation Risk
This is the decisive concern. The domain is blacklisted by external threat-intelligence sources, with at least one engine rating it malicious and another rating it suspicious. This is a confirmed contradiction. Combined with the domain's very recent creation, it places the site firmly in a cautionary category. No conflicting legal entities were found, and no brand impersonation was established, so the risk rests on the blacklisting and the domain's newness. Browser-behaviour testing was benign. Across three successful runs the homepage made no external requests, showed no wallet-connection prompts, no hidden or externally posting password forms, no clipboard manipulation, and no cloaking. This lowers the likelihood of an active drive-by exploit on the homepage. It does not offset the external listing, because a young domain behind an edge network can change its content quickly. Evidence:
- Homepage: sandbox sessions recorded no external network activity and no credential-capture or wallet behaviour.
- Domain provenance: registered 2026-08-03 (about 0.22 years, roughly 79 days old).
- External reputation: one engine rated the domain malicious and one suspicious, and an external blacklist hit is recorded.
Regulatory Verification Notes
The homepage discloses no operating company, licence, registration number or governance information. The operator's real-world identity is not independently established, and domain ownership details are incomplete, which is ownership opacity rather than an identity contradiction. The sparse content gives no basis for treating the site as a regulated or licensed service. No third-party broker or regulatory record was matched to the domain. The transport encryption is valid but is only a basic domain-validated certificate, which proves control of the domain and says nothing about the operator. Evidence:
- Homepage: no company name, licence or registration reference is shown.
- Registration: domain registered through Dynadot Inc, expiring 2027-08-03, with owner details incomplete.
- Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-03 (42 days remaining).
- Hosting: served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
Before any interaction, confirm independently who operates "CoreX" and whether any legitimate organisation claims this domain, using sources outside the site itself. Check that the domain is the one published by any organisation that references it, since a CDN-style name could be borrowed to look like trusted infrastructure. Review the status of the external listing with the reporting sources, and confirm whether the owner has remediated or disputed it. Verify official support and contact channels through an independent route, not through links or details on the site. Evidence:
- Homepage: the "CoreX" title is the only identity cue, and no operator is named.
- Domain registration: the domain is only a few months old, so there is no long operating record to rely on.
- External reputation: the listing is current and unresolved based on the available evidence.
Summary Verdict
The site carries an elevated risk posture. A confirmed external blacklisting, a very young domain and an unestablished operator identity outweigh the clean behavioural testing and the valid certificate. The evidence does not support treating the site as trustworthy at this time.
Infrastructure Integrity
The site sits entirely behind Cloudflare's CDN and web application firewall. All four observed addresses are edge servers, and the origin host could not be seen. This is a mitigating factor for availability and basic transport hygiene only. It limits independent verification of where the content is actually hosted and does not indicate the site is legitimate. A heuristic flag for a young domain with sparse subdomains is consistent with a recently stood-up property and is unconfirmed.
Closing Assessment
The site should be limited to passive viewing at most. No account login, credential entry, payment or financial interaction is appropriate, and nothing should be downloaded from it, until the external listing is cleared and the operator is independently identified.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, hosting and network, registration and ownership.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of ocagent-cdn.com.
- The request stayed on ocagent-cdn.com. It was not redirected to another domain. Clear
- Registration is published under Dynadot Inc. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-08-03. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Dynadot Inc |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::6815:204d |
| Name servers | DARL.NS.CLOUDFLARE.COM, DELL.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-03 |
| Domain age | 0.22 years (continuous registration) |
| Domain expiry | 2027-08-03 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about ocagent-cdn.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.