--- title: "Is sodex.live a Scam? Trust Score 0/100" source: TrustSniffer type: Website trust & fraud report subject: "sodex.live" verdict: "Critical Risk" title: "Is sodex.live a Scam? Risk Report, Score 0/100" trust_score: 0 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/sodex.live assessed: 2026-10-22 --- # Is sodex.live a scam? TrustSniffer's high-risk assessment: 0/100 ## Verdict **Verdict: Critical Risk, trust score 0/100.** sodex.live shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-22 by automated analysis. Classification confidence 75%. ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 8 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear | | Domain age | 1 months old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2025 (2 snapshots) | Clear | | Certificate | Encrypted connection (Issued by WE1) | Noted | ## The page as captured ![Screenshot of the sodex.live homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/sodex.live/screenshots/first.png) _What sodex.live served when TrustSniffer captured it on 2026-10-22. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2025. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. sodex.live is a very recently registered .live domain. When automated analysis captured its homepage, the page returned a Cloudflare interstitial headed "suspected phishing" instead of ordinary site content. Because the page itself was a warning screen, the site's products and business model could not be established from what it presented. The domain's apparent purpose is unconfirmed, and it should be treated as an unverified, newly created web property that currently attracts security warnings. ### Scam/Impersonation Risk Multiple independent threat signals converge on this domain. A **confirmed blacklist** presence is recorded, with a meaningful cluster of malicious and suspicious detections from major security vendors, including several top-tier ones. The homepage the analysis encountered was a phishing-suspicion warning from the site's own CDN provider. No brand impersonation or conflicting legal identities were observed, so the risk rests on the reputation and phishing-warning signals, not on identity contradictions. Behavioural testing found no wallet-drainer activity, clipboard manipulation, hidden forms, or credential posts to external hosts. Even so, the page generated a heavy volume of third-party network traffic: dozens of cross-origin background requests and several external POST submissions. It also produced a large number of script errors and a very large burst of page changes after interaction. These traits are consistent with an unstable or heavily scripted front end, and they do not offset the blacklist evidence. The combination of a brand-new domain and active threat listings is a pattern commonly associated with short-lived phishing or malware infrastructure. The posture is therefore elevated risk, and credential entry, wallet connection, and payment on this domain are unsafe. Evidence: - Homepage capture: the page was served behind a bot challenge with a 403 response and carried the title "Suspected Phishing | Cloudflare", with only a few hundred characters of text. - Reputation checks: 8 malicious and 2 suspicious detections were recorded, and two top-tier security vendors flagged the domain. - Behavioural sandbox (3 of 3 runs completed): 68 external background requests, 9 external POSTs, 25 console errors, and 1,518 page mutations after interaction. No wallet-drainer, clipboard-hijack, or hidden-form behaviour was detected. - Domain provenance: registered 2026-09-11 (~0.11 years old) through NICENIC INTERNATIONAL GROUP CO., LIMITED, expiring 2027-09-11. The web archive holds only 2 snapshots, spanning 2025–2026, with the first seen 2025-07-10 and the last 2026-09-19. ### Regulatory Verification Notes The captured homepage presented no legal entity name, licence, registration number, or terms of service, so there is nothing on it to check against a regulator or corporate registry. The operator cannot currently be tied to any real-world company or person, and the site's very short history gives no track record that could substitute for that. No third-party broker or regulatory-database record matched this domain, which adds no reputational context either way. The blacklist signals described above are the dominant concern. This disclosure gap would be a verification item on its own, but here it compounds the threat evidence and does not stand alone. Evidence: - Homepage: no company name, licence, registration number, or contact disclosure appeared in the captured content. - Broker and regulatory databases: no match was found for this domain. - Hosting and encryption: served from AS13335 (Cloudflare, Inc., US); the TLS certificate is a domain-validated one issued by WE1, valid to 2026-12-10. This certificate confirms encryption only and says nothing about the operator's identity. ### What to Verify Next Before any engagement, the operator should be required to prove who it is through an independent route. That means a named legal entity, a registry-verifiable registration, and any claimed licence confirmed directly with the issuing authority. Official contact channels should be confirmed through a source that does not originate from this domain. Any claimed affiliation with an established brand or protocol should be checked against that brand's own verified channels, and not against links or references found on this site. The domain's threat listings should be re-checked after the operator has remediated or disputed them. Until then, nothing should be downloaded from the domain. Evidence: - Homepage: it presented no verifiable operator, brand affiliation, or licence claims to test. - Registration record: the domain is only weeks old, so no operating history exists to corroborate any identity claim. - Reputation findings: the active blacklist and detection listings are the primary item to re-test after any claimed remediation. ### Summary Verdict The available evidence supports an elevated-risk posture. A confirmed blacklist, multiple security-vendor detections, a phishing-suspicion warning on the landing page, and the absence of any established history converge on the same conclusion. Legitimacy is not supported, and the operator's identity is unverified. ### Infrastructure Integrity The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address, so the true origin server is not visible. A valid, known-issuer TLS certificate and bot protection are in place. These are mitigating technical hygiene factors only. Such protections are available to any customer, benign or malicious, and they cannot offset the reputation findings. The edge-only visibility also prevents independent verification of where the content is actually hosted. ### Closing Assessment This domain should be treated as unsafe for any sensitive interaction. Account login, credential entry, wallet connection, and payments or transfers should all be avoided. At most, it should be viewed passively from an isolated environment, and no files should be downloaded from it. Any link that led here through an unsolicited message should be reported and not followed. _Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, behaviour in a sandbox, registration and ownership. ### 01 External reputation - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`) ### 02 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### 03 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 04 Behaviour in a sandbox - Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`) - The structure of the page changed sharply while it was loading. (Behaviour in a sandbox `rule:BEHAV_DOM_DENSITY_SPIKE`) ### 05 Registration and ownership - The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`) ## Identity verification | Field | Value | | --- | --- | | Status | UNKNOWN | | Identity score | 50/100 | | Identity verification confidence | 30% | - AI page analysis unavailable (page captured; identity not AI-verified) _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of sodex.live. - The request stayed on sodex.live. It was not redirected to another domain. (Clear) - Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. (Clear) - DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted) - The registration is paid up to 2027-09-11. (Noted) - The earliest public archive of this site is from 2025-07-10. (Clear) - It is hosted on CLOUDFLARENET, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED | | Hosting | CLOUDFLARENET - Cloudflare, Inc., US | | Country | US | | Server IP | 2606:4700:3033::ac43:c158 | | Name servers | sara.ns.cloudflare.com, jermaine.ns.cloudflare.com | | CDN / edge network | Detected (cloudflare) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | WE1 | | SSL expiry | 2026-12-10 | | Domain age | 0.11 years (continuous registration) | | Domain expiry | 2027-09-11 | | Archive first seen | 2025-07-10 | | Archive snapshots | 2 | | Reputation | VirusTotal: 8 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about sodex.live at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [pumpfunsol.live](https://trustsniffer.com/report/pumpfunsol.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [interlinklabs.live](https://trustsniffer.com/report/interlinklabs.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [dovu.live](https://trustsniffer.com/report/dovu.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [orcaclaim.live](https://trustsniffer.com/report/orcaclaim.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [xrpaynet.live](https://trustsniffer.com/report/xrpaynet.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [xrpl-dapp.live](https://trustsniffer.com/report/xrpl-dapp.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [xrpl-defi.live](https://trustsniffer.com/report/xrpl-defi.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [xrpl-phase1.live](https://trustsniffer.com/report/xrpl-phase1.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [drop-flap.com](https://trustsniffer.com/report/drop-flap.com), another site assessed as critical-risk (Critical Risk, 0/100) - [claim-peipeicoin.com](https://trustsniffer.com/report/claim-peipeicoin.com), another site assessed as critical-risk (Critical Risk, 0/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [How to check if TRC20 USDT is genuine Tether](https://trustsniffer.com/blog/how-to-check-if-trc20-usdt-is-genuine-tether) - [Stablecoin Freezes, Oct 27, 2026: 7 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-27) - [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites) --- *Source: [TrustSniffer](https://trustsniffer.com/report/sodex.live) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/sodex.live · assessed 2026-10-22.*