Verdict
Most signals looked ordinary, and some evidence was missing. Read the checks below before you pay or hand over personal details.
vote-okxpolls-158.pages.dev is moderately trusted.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This is an unbranded web page hosted on a free subdomain of a developer site-publishing platform. The hostname frames it as an "OKX polls" voting page, which presents a well-known cryptocurrency exchange brand in a community poll or vote setting. The analysis captured no substantive page content, only an empty placeholder response. It therefore shows no visible products, operator name, or business model, and its apparent purpose rests on the hostname alone: a lightweight campaign or engagement page that borrows a recognizable brand.
Scam/Impersonation Risk
Active contradictions are present. The domain is flagged by external threat-intelligence sources, and this is a confirmed blacklist hit that drives the cautionary posture of this report. The hostname also reuses a major exchange brand inside a throwaway subdomain on a shared publishing platform. Pages of this type are a common vehicle for brand-themed lures such as fake votes, giveaways, or wallet-linking prompts. Reputation sources also describe the hostname as a very close lookalike of the hosting platform's own domain. The sandbox observed no wallet-connection attempts, clipboard manipulation, hidden forms, credential posts, or external data transmission, so no active exploitation was confirmed during the observation window. Because the page returned no real content, these clean behavioral results say little about what the page may serve to other visitors or at other times. No conflicting legal identities were found, since no identity content was available to compare. Evidence:
- Homepage: the capture returned an empty placeholder response rather than a functioning page.
- Hostname: it combines a major exchange brand with a poll theme and a numeric suffix on a shared publishing platform.
- Reputation: external threat-intelligence sources currently list the domain, with one engine rating it malicious and another suspicious.
- Sandbox: three interaction runs completed with no external requests, wallet activity, or credential-form behavior.
Regulatory Verification Notes
The site presents no legal, terms, privacy, or about content, so no operator name, registration number, or licensing claim can be assessed. An exchange-branded poll would be expected to point back to the real brand's official properties, and this one does not. Registration details for the domain are incomplete. This is treated as ownership opacity, not as an identity contradiction. Identity verification is also not established, so any association with the exchange brand is unconfirmed. No third-party broker or regulatory-database match was found for the name, which means there is no regulatory standing either to rely on or to dispute. Evidence:
- Legal and about pages: none are present on the captured site.
- Transport security: the site has a valid DV TLS certificate issued by YE2, valid to 2027-01-14 (about 84 days remaining). This confirms an encrypted connection only, not operator identity.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Broker datasets: no match was found.
What to Verify Next
The first step is to confirm through the exchange's official website, app, or announcements whether any poll or voting campaign exists. The link should not be reached through the page itself or through unsolicited messages. If the page was received through a message, social post, or advertisement, the sender's account should be checked for authenticity and the link reported rather than opened. Official support channels should be confirmed independently before any contact is made. Any request to connect a wallet, sign a transaction, or enter exchange credentials in connection with this page should be treated as unverified until the brand confirms it. Evidence:
- Hostname: the exchange name appears only inside a shared-platform subdomain, not on the brand's own domain.
- Homepage: no legitimate campaign content or official brand links were captured.
- Reputation: active third-party listings mean the page's current behavior cannot be assumed benign.
Summary Verdict
The overall posture is elevated risk with a clearly cautionary stance. Technical hygiene and a clean sandbox run are real mitigating factors, but they do not outweigh active external listings, an unverified identity, and brand-themed naming on a disposable subdomain. The site reads as unestablished and potentially deceptive. It cannot be treated as an authentic extension of any known brand.
Infrastructure Integrity
The site is delivered through Cloudflare's CDN and WAF. All observed addresses are edge servers, so the origin host was not observable, and that limits independent hosting verification. The edge network also makes it easy to swap content quickly behind a stable address. Protective infrastructure and a valid certificate are mitigating factors only. They do not offset the reputation risk and do not indicate that the content is legitimate.
Closing Assessment
The page should be treated as read-only at most, and preferably not opened at all. No wallet should be connected, no transaction signed, and no login, seed phrase, or financial detail entered. Any engagement with the exchange should go through its officially published channels.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by external reputation, registration and ownership.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of vote-okxpolls-158.pages.dev.
- The request stayed on vote-okxpolls-158.pages.dev. It was not redirected to another domain. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2fc8 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2027-01-14 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about vote-okxpolls-158.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.