Verdict
Most signals looked ordinary, and some evidence was missing. Read the checks below before you pay or hand over personal details.
vote-okxpolls-180.pages.dev is moderately trusted.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
vote-okxpolls-180.pages.dev is a subdomain on a free developer web-publishing platform. Its name suggests a voting or poll page that references the brand of a well-known cryptocurrency exchange. When the homepage was captured, it returned a not-found response with no visible content. It presented no products, offers, branding or operator, so its purpose cannot be established from the site itself. The naming pattern, and the fact that anyone can create such a subdomain at no cost, match the format commonly used for short-lived promotional or lure pages.
Scam/Impersonation Risk
This host carries a confirmed adverse reputation signal. An external threat-intelligence source lists it, and the reputation checks recorded one security engine rating it malicious and another rating it suspicious. Indicators consistent with prior phishing activity are also recorded against the host. Under the assessment criteria, this is a confirmed blacklist-level contradiction, so the report takes a clearly cautionary posture. The hostname embeds a name that appears to reference a major crypto exchange, together with "vote" and "polls" wording. That pattern fits engagement-bait or reward-claim lures that steer visitors toward wallet connection or credential entry. The evidence does not show brand impersonation or conflicting legal identities. No page content was available to show what the site asks visitors to do. The assessment therefore rests on the reputation findings, not on observed on-page behaviour. In the controlled behavioural runs, the site showed no outbound data transfers, no wallet-connection attempts, no clipboard manipulation, no hidden forms and no content cloaking. These results mitigate the risk but do not offset the external listing. Evidence:
- Homepage: the root page returned a not-found response and rendered no content.
- Hostname: the name combines an exchange-style brand reference with "vote" and "polls" wording on a free shared subdomain service.
- Reputation checks: an external blacklist listing is present, and one engine flagged the host as malicious and one as suspicious.
- Behavioural testing: the three sandbox runs showed no external requests, wallet interaction or clipboard activity.
Regulatory Verification Notes
The site presents no legal, terms, privacy or about pages, so no operator, legal entity, licence or registration is disclosed. Ownership and governance are opaque. The identity of whoever controls this host cannot be tied to the exchange brand its name evokes, or to any real-world organisation. That is a verification gap and not proof of wrongdoing, but together with the reputation listing it leaves nothing to support a legitimate-operator reading. No third-party broker or regulator profile matches this host, so there is no reputational context beyond the threat listing itself. Evidence:
- Homepage and site structure: no legal, terms, privacy, contact or about content was observable.
- Transport security: TLS certificate issued by YE2 (domain-validated only), valid to 2027-01-14. This confirms encryption but not who operates the site.
- Network: served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
Anyone who received this link through a message, social post or advertisement should first confirm with the sender, through a separate channel they already trust, that they actually sent it. Any poll or promotion tied to the exchange brand should be checked against the exchange's official website, app or verified social accounts, reached by typing the address manually and not by following this link. No licence or registration can be checked until an operating entity is named. Security teams should check whether the host appears in their own web-filtering or email logs and, if so, treat it as a reported-threat indicator. Evidence:
- Hostname: the brand reference cannot be tied to any official presence from this site alone.
- Homepage: no named operator or registry identifier exists to look up.
- Reputation checks: an external listing is active, so internal filtering review is warranted.
Summary Verdict
The overall posture is one of elevated risk. Positive technical indicators are present but limited to valid encryption, clean behavioural testing and mainstream hosting. They are outweighed by an active adverse reputation listing and the absence of any verifiable operator or legitimate content. The available evidence does not support treating this as a legitimate, identity-verified website.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and web application firewall, and every observed address is a CDN edge address. The origin server was not observable, so the hosting arrangement cannot be independently verified, and content can change quickly behind the edge without notice. The infrastructure is mainstream, with a valid certificate and no unusual network behaviour in testing. It is a mitigating factor only. It does not offset the reputation findings or vouch for the operator, because anyone can place a page on this shared platform.
Closing Assessment
Treat the site as read-only at most, and preferably do not visit it. Do not sign in, connect a crypto wallet, approve any transaction or enter personal or payment details on it. Anyone who has already interacted with it should review wallet permissions and change any credentials that were entered.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by external reputation, registration and ownership.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of vote-okxpolls-180.pages.dev.
- The request stayed on vote-okxpolls-180.pages.dev. It was not redirected to another domain. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f24 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2027-01-14 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about vote-okxpolls-180.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.