Is voting-mefai-net.pages.dev a scam? TrustSniffer's high-risk assessment: 21/100

Overview

This website is a single-page trading-themed site titled "MEFAI - Next Gen Trading", published on a free subdomain of a shared web-hosting platform rather than on a dedicated branded domain. It presents a text-heavy landing page that promotes a next-generation trading offering, and its apparent purpose is to attract visitors into a trading or token-related service. The available evidence does not tie the site to any identifiable operator or brand.

Scam/Impersonation Risk

Contradictory signals are present and weigh heavily against the site. Several independent security engines currently rate the domain as malicious or suspicious, and an external blacklist listing corroborates this, so the site is blacklisted by third-party threat-intelligence sources. The listing has no plausible benign explanation in the other evidence. The subdomain name combines "voting", "mefai" and "net" on a shared hosting platform. That pattern is typical of throwaway pages that borrow a recognizable name, and nothing links the site to a verified owner of the MEFAI name. No explicit brand impersonation, conflicting legal identities or confirmed phishing kit was observed in the page content. The risk therefore rests on the reputation hits and on the absence of any independent anchor for the site's identity. Behavioural testing of the homepage found no wallet-connection prompts, clipboard manipulation, hidden or credential-harvesting forms, or content cloaking. These results do not offset the external detections. During page load the site made a very heavy volume of calls to external resources, and most of its activity was directed to third-party hosts, a few of them outside the commonly recognized set. That pattern is consistent with a page assembled from, or relaying to, remote components that can be swapped without any visible change to the front end. Evidence:

• Homepage, external reputation: 3 security engines flag the domain as malicious and 1 as suspicious, out of 92 evaluated, and an external blacklist also lists it.
• Homepage, behaviour: 96 external XHR/fetch requests across 3 sandbox runs, with up to 86% of activity going to external hosts. Three console errors were logged.
• Homepage, sandbox behaviour: no wallet-connect, clipboard-write, hidden-form or cloaking behaviour was detected.
• Domain naming: the site sits on a shared-platform subdomain whose name closely resembles the platform's own namespace.

Regulatory Verification Notes

No licence, registration number, regulator or legal entity could be linked to the site, and the on-page disclosure position is unclear. The operator's real-world identity is unverified, and ownership and governance are opaque. For a site that promotes trading, this is a significant verification gap. It is a transparency matter in its own right and is not evidence of fraud, but it removes the usual assurance that a regulated trading venue would provide. No third-party broker-review record matched this site. This absence is neutral, not a clearance. The site's transport encryption is valid, but a domain-validated certificate only confirms control of the hostname and says nothing about the legitimacy of the operator. Evidence:

• Homepage: no legal entity, licence or regulator reference was identified in the available content.
• Served from AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by WE1 (DV), valid to 2026-12-04, with 38 days remaining.
• No broker-reputation database entry matched the site.

What to Verify Next

Any claim that this site is the official MEFAI service should be checked by reaching the brand's published channels independently, not through links or contact details on this page. Anyone told to use the site for trading, voting or token activity should ask the claimed operator to confirm in writing that the site is theirs. Any licence the operator claims should be confirmed in the relevant financial regulator's own public register, using the entity name found there. The official support and contact channels should be confirmed through an independent, offline route. If the site is connected to a real organization, its security team should be asked to review the external detections and the unexplained third-party traffic. Evidence:

• Homepage: the title presents a trading brand, but no independent proof of ownership was found on the site.
• Reputation: the blacklist and malicious ratings are current and have not been cleared.
• Hosting: the shared-platform subdomain differs from any domain the brand may officially operate.

Summary Verdict

The overall posture is high risk. Confirmed third-party threat detections, together with the lack of any verifiable operator, outweigh the technically sound transport security and stable page behaviour. The site is an elevated-risk property for any sensitive or financial interaction.

Infrastructure Integrity

The site is served entirely from Cloudflare's edge network, and no origin server was observable. This is a mitigating factor only. It shows the site runs on mainstream, well-maintained infrastructure, but it does not support legitimacy. It also prevents independent verification of where the content is actually hosted, and it can mask rapid content swaps behind a stable-looking address. The edge protection cannot offset the reputational risk identified above.

Closing Assessment

The site should be treated as read-only at most. Credentials, wallet approvals, deposits and any financial transactions should not be entered or made on it until the operator is independently verified and the threat listings are cleared. Access from an isolated or non-critical environment is advisable if review is necessary.