Is vote-okxpolls-176.pages.dev safe? TrustSniffer's moderate-trust assessment: 51/100

Overview

This is a minimal-footprint web property hosted as a subdomain on a shared static-page hosting platform. Its hostname combines the name of a major crypto exchange with the words "vote" and "polls" and a numeric suffix. At capture, the homepage returned a not-found response with no readable content, so it showed no visible products, forms or operator branding. The name suggests a campaign or voting landing page aimed at users of that exchange, a format often used to draw visitors into account or wallet interactions.

Scam/Impersonation Risk

A confirmed external blacklist hit is the decisive contradiction on this site. At least one major reputation engine rates the hostname as malicious and another as suspicious, and the aggregated external reputation view is flagged. No identity contradiction was found, because no legal-entity names are published to conflict. No content-level phishing or impersonation was confirmed on the captured page. The hostname still invokes a well-known exchange brand paired with a "vote/polls" theme, a construction commonly used for lure pages. Combined with the blacklist hit, this pattern warrants treating the site as a potential brand-themed lure until proven otherwise. In the behavioral sandbox, three runs produced no external network requests, no wallet-connect prompts, no hidden or externally posting password forms, no clipboard manipulation and no cloaking. This is mitigating, but it covers only the empty page that was served. Content swapped in later would not be covered. A published contact address was not available to assess. Evidence:

• Homepage: returned a not-found response with no substantive content at capture, so no product claims could be assessed.
• Hostname: pairs a major exchange's brand name with "vote" and "polls" on a free shared-hosting subdomain.
• External reputation: one engine reports the hostname as malicious and one as suspicious, and the aggregated blacklist flag is active.
• Sandbox: 3 of 3 runs completed with zero external requests and no wallet, clipboard or hidden-form activity.

Regulatory Verification Notes

The captured site has no legal, terms, privacy, about or contact pages, so no operator name, registered entity, licence or registration number is published. Operator identity therefore cannot be linked to any real-world brand or person, and ownership is opaque. This is a verification gap rather than proof of wrongdoing, but here it sits alongside a confirmed external blacklist hit. No third-party broker or regulatory-database match was found, so no external reputational context exists either way. Transport security is present and technically sound. This shows that the connection is encrypted, not who operates the site or whether it is legitimate. Evidence:

• Homepage: no identity, licensing or legal-disclosure content was retrievable.
• Transport encryption: TLS certificate issued by YE2 (DV, domain validation only, no organization identity), valid to 2027-01-14.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Third-party broker dataset: no match for this hostname.

What to Verify Next

Before any interaction, confirm through the exchange's official website or verified social channels, reached independently and not through this site, whether any poll, vote or campaign exists. Treat any invitation to this hostname as unverified until the exchange confirms it. Establish who operates the site through an independent route and do not rely on anything the page claims. Re-check the site's external reputation status before any later reassessment, because a clean result would be needed to change this posture. Confirm the official contact and support channels of any organization the site claims to represent through an independent, offline route. Evidence:

• Hostname: the exchange-themed "vote/polls" naming is the claim that needs independent confirmation.
• Homepage: no operator, campaign sponsor or contact details are published to test.
• External reputation: the active blacklist flag is the baseline against which any re-check should be compared.

Summary Verdict

The site carries an elevated risk posture. Its technical hygiene is adequate: encrypted transport and quiet sandbox behavior. However, the confirmed external reputation hit is decisive and protective measures cannot offset it. No operator has been identified, and no legitimate function has been demonstrated. The evidence supports caution rather than a finding of confirmed fraud.

Infrastructure Integrity

The site runs behind Cloudflare's CDN and WAF, and all four observed addresses are edge servers, so the origin host is not visible. This is a mitigating factor. It shows mainstream, well-run infrastructure, but it does not show legitimacy, and it limits independent hosting verification. It also makes rapid content changes harder to detect, which matters for a page that is currently empty. The platform's shared, free subdomain model means the hosting provider vouches for nothing about the site's operator.

Closing Assessment

Use should be limited to read-only viewing at most. No login, credentials, wallet connection or financial interaction should take place through this site. Anyone who arrived via a message, advertisement or social post should treat that source as unverified and report it to the exchange it appears to reference.