Is voting-yeifi.pages.dev safe? TrustSniffer's low-trust assessment: 33/100

Overview

This website is a single-page site titled "Yei Finance", served from a free, shared-platform subdomain rather than a standalone branded domain. The subdomain name begins with "voting". It presents itself as a finance-themed web property. Its purpose cannot be established from the captured content, because page-level analysis of the homepage text was incomplete and no products, rates or operator details could be extracted. A finance brand name on a disposable subdomain is a pattern commonly associated with lookalike or credential-harvesting pages.

Scam/Impersonation Risk

The decisive finding is a confirmed blacklist listing. Multiple independent threat-intelligence sources currently flag this site as malicious or suspicious, and the site also carries a prior phishing association in historical records. This is a hard contradiction and elevates the risk of any sensitive interaction. No conflicting legal identities were observed. No on-site brand impersonation was established from the captured content, but the finance-brand title on a "voting"-prefixed subdomain fits the profile of a pretext page and cannot be dismissed. Automated browsing sessions did not observe wallet-connection prompts, clipboard tampering, hidden forms or credential posts to outside hosts, so no active drainer behaviour was confirmed. The homepage did, however, trigger a heavy volume of background requests to external hosts, including several to unfamiliar, non-standard destinations, and posted data externally. This cannot be explained from the visible content. Because this is a live blacklist hit, the listing outweighs the absence of observed malicious behaviour. Evidence:

• Homepage: blacklist hit confirmed by three security engines rated malicious and one rated suspicious, with no Google Safe Browsing detection.
• Homepage behaviour: 15 external XHR/fetch calls and 3 external POST requests across 3 sandbox runs, with 3 destinations not on the known-benign list; 3 console errors recorded.
• Domain provenance: registered in 2026 (~0.77 years, ~282 days old); only 1 archive snapshot, dated 2026-01-17, covering 1 year tracked.

Regulatory Verification Notes

The captured content discloses no licence, registration number, legal entity or named operator, and the site's operator is not independently identified. Because it sits on a shared platform subdomain, there is no registrant-level identity to connect it to the finance brand it displays. The site does not appear as a recognised protocol in public DeFi directories. No third-party broker or regulator record matched this site. The absence of a licence alone is a verification gap rather than proof of wrongdoing. Here, though, it compounds the confirmed threat listing, so no regulatory standing can be assumed. Evidence:

• Homepage: no company name, licence or registration reference found in the captured content.
• Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1, DV validation (no organisation vetting), valid to 2026-12-03 (37 days remaining at analysis).
• Broker reputation database: no match for the site.

What to Verify Next

Treat any link to the real Yei Finance project as unconfirmed until it is validated independently. Locate the project's official domain through its verified social accounts, or through a trusted aggregator listing it, and compare it character by character with this address. Any message, advert or QR code that led to this page should be treated as suspect and traced back to its sender through a separate channel. If the page prompted a wallet connection or a signature, review and revoke recent token approvals on the connected wallet. Confirm the project's official support channels through the official domain only. Evidence:

• Homepage: the title "Yei Finance" appears on a platform subdomain, not a dedicated brand domain.
• Threat listing: the current blacklist status should be rechecked on the public reputation services before any further decision.
• Operator identity: no operator or contact detail on the site can be tied to the brand it shows.

Summary Verdict

The overall posture is high-risk and clearly cautionary. Current threat-intelligence listings dominate the assessment, and the site's youth, thin history and unverified operator identity give no countervailing basis for trust. The valid encryption certificate and mainstream hosting are minor mitigating factors that do not offset the reputation findings. The site's real-world identity remains unestablished, and its legitimacy is not supported by the available evidence.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF, and all four observed addresses (IPv4 and IPv6) are edge servers. The origin server was not visible, so hosting cannot be verified independently. Edge-only visibility also means content can be swapped quickly without any change in observable infrastructure. Cloudflare bot protection was present during browsing. The edge platform and a valid certificate are mitigating factors only. They say nothing about the operator's intent, and the same free-tier platform is widely used for both legitimate and abusive pages.

Closing Assessment

Interaction should be limited to passive viewing at most. Do not enter credentials, connect a wallet, sign transactions, make payments or download files from this site. Anyone who has already done so should revoke wallet approvals, change affected passwords and report the page to the platform's abuse channel.