Is vote-terminal.pages.dev a scam? TrustSniffer's high-risk assessment: 17/100

Overview

Terminal Finance is a single-page website served from a free, shared-hosting subdomain on a public web-publishing platform rather than from a branded domain of its own. The homepage carries only a short block of text under the title "Terminal Finance". It gives the visitor little to show what product, service or organization stands behind it. Its apparent purpose is to present a finance-themed "terminal" or voting-style interface, but the captured content does not establish a clear business model.

Scam/Impersonation Risk

This is the decisive section of the assessment. The domain is blacklisted by external threat-intelligence sources. Several independent detection engines classify it as malicious, and one more marks it as suspicious. Historical reputation data also associates the domain with known phishing activity. No distinct legal-entity names conflict across legal or identity pages, so there is no identity contradiction. The risk is a confirmed negative reputation, not a mismatch of identities. Browser-level behavioral testing found no wallet-connection prompts, wallet-drainer behavior, clipboard manipulation, hidden forms, or cloaking, and every external request went to recognized destinations. That mitigates the technical risk but does not offset the blacklisting. The domain is also very young and sits on a shared free-hosting subdomain that is trivial to create, replace or abandon. A site with a finance-flavored name, almost no content and a malicious reputation matches the profile of a disposable lure, so any financial, credential or login interaction is unsafe. Evidence:

• Homepage: a short text block under the title "Terminal Finance", with no named operator, product description or contact channel.
• Domain provenance: registered about 88 days ago (~0.24 years old), with 1 web-archive snapshot captured in 2026 (1 year tracked).
• External reputation: 2 threat-intelligence engines flag the domain as malicious and 1 as suspicious, and it is listed on an external blacklist.
• Behavioral testing: 3 of 3 sandbox runs completed, with 12 external XHR requests and 3 external POSTs, all to whitelisted destinations, and no wallet or cloaking activity.

Regulatory Verification Notes

The captured homepage names no legal entity, registration number, licensing authority or jurisdiction. There are no terms, privacy or about pages in the evidence to test an identity claim against. The real-world operator therefore cannot be independently connected to any known company or person. No third-party regulatory or broker-reputation record matches this site, and the absence of a record is not itself adverse. This is a verification gap, separate from the reputational findings above. Any finance-related activity would require a regulated, identifiable counterparty, and none is evident here. Evidence:

• Homepage: no company name, licence or registration details are published.
• Hosting: the site is served from AS13335 (Cloudflare, Inc., US), a shared platform that says nothing about the site's operator.
• Transport encryption: the TLS certificate was issued by WE1 (DV, domain-validated only) and is valid to 2027-01-17. This confirms encryption, not operator identity.

What to Verify Next

Before any engagement, the operator should be established through an independent route unrelated to this site, such as a registry search of the financial regulator in the jurisdiction the operator claims. Anyone who received this link from a third party should confirm out of band, with the sender, that the sender actually intended to share it. Official contact channels should be confirmed from sources other than this page. The threat-intelligence listing should be rechecked after a reasonable interval to see whether the detections are cleared or confirmed. Evidence:

• Reputation: the current malicious and suspicious detections are the baseline for any re-check.
• Homepage: it offers no verifiable operator identity to check against a registry.

Summary Verdict

The overall posture is high-risk. Confirmed external blacklisting, a very recent domain, and an unverifiable operator behind a near-empty finance-branded page outweigh the technically clean sandbox behavior and valid encryption. The available evidence does not support treating this site as legitimate, and the site's identity remains unverified.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all observed addresses are CDN edge servers. The origin server was not observable. This is a mitigating factor only: the certificate is valid and issued by a recognized authority, and the edge network itself has no abuse reports. Edge-only visibility prevents independent verification of the real hosting and can mask rapid content swaps. The protection cannot offset the reputation risk. Evidence:

• Hosting: AS13335 (CLOUDFLARENET, Cloudflare, Inc., US), with 4 observed edge IPs and 0 likely origin candidates.
• TLS: issued by WE1 (DV), valid to 2027-01-17, about 80 days remaining.

Closing Assessment

Treat the site as read-only at most. Do not enter credentials, connect a wallet, log in, or send or commit funds, and do not download anything from it. Anyone who has already interacted with it should change any reused passwords and review related accounts for unauthorized activity.