---
title: "Is xexchanger.pages.dev Safe? Trust Score 52/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "xexchanger.pages.dev"
verdict: "Moderate Trust"
title: "Is xexchanger.pages.dev Safe? Trust Review, 52/100"
trust_score: 52
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/xexchanger.pages.dev
assessed: 2026-10-25
---

# Is xexchanger.pages.dev safe? TrustSniffer's moderate-trust assessment: 52/100

## Verdict


**Verdict: Moderate Trust, trust score 52/100.** xexchanger.pages.dev is moderately trusted.

Most signals looked ordinary, and some evidence was missing. Read the checks below before you pay or hand over personal details.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-25 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 2 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 1.9 years old (Registered history) | Clear |
| Web archive | Archived since 2024 (11 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the xexchanger.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/xexchanger.pages.dev/screenshots/first.png)

_What xexchanger.pages.dev served when TrustSniffer captured it on 2026-10-25. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This website is a web property published on a shared Cloudflare Pages subdomain whose name, "xexchanger", suggests a currency or digital-asset exchange service. The page captured from its homepage was a security interstitial titled "Suspected Phishing", served with a forbidden status, rather than any exchange interface. No products, rates, or service descriptions from the site itself were observable, so its business model is unconfirmed, and the available evidence is consistent with a newly established web front end that carries active reputational warnings.


### Scam/Impersonation Risk

Contradictory signals are present and are the decisive factor in this assessment. Several independent threat-intelligence engines currently flag the domain as malicious or suspicious, and the domain is recorded as a known phishing indicator in historical data. This amounts to a **confirmed blacklist-level reputational hit**, and it is why the site is treated as elevated risk for any sensitive interaction. No conflicting legal entities, brand impersonation, or identity contradictions were observed. The threat is reputational and behavioural rather than an identity conflict. The domain sits under a shared hosting subdomain and closely resembles that platform's own namespace. This gives the operator no independent brand domain, which makes it easier to present a changing front end under a disposable address. Browser-behaviour testing was more benign. Repeated sessions showed no wallet-connection attempts, no clipboard manipulation, no hidden forms, and no credential posts to third-party hosts. Heavy external request traffic was directed only at allow-listed destinations. This lowers the likelihood of in-page drainer mechanics. It does not offset the external threat detections, and the page content was largely unobservable behind the challenge screen. Evidence:

- Homepage capture returned a security interstitial titled "Suspected Phishing" with HTTP 403, so no site-authored content could be reviewed.
- Threat-intelligence aggregation: 2 engines classify the domain as malicious and 1 as suspicious; an external blacklist flag is active.
- Domain registered about 1.9 years ago (~704 days); web archive holds 11 snapshots spanning Nov 2024–Mar 2025 (2 years tracked), and these records carry a phishing-known marker.
- Behavioural sessions (3 of 3 successful) recorded 121 external XHR/fetch calls and 4 external POSTs, none to non-allow-listed hosts, with no wallet, clipboard, or hidden-form activity.

### Regulatory Verification Notes

The captured page exposed no legal, terms, about, or licensing content, so no regulatory status, registration number, or named operating entity could be assessed. No third-party broker or regulator record matched the domain, so there is no reputational signal on this point in either direction. The registrant details are incomplete, which is **ownership opacity** and an administrative limitation. It is not an identity contradiction. Real-world operator identity has not been independently verified, and nothing on the site supports an apparent-legitimacy conclusion. The only affirmative technical points are a valid transport-encryption certificate and a clean association with mainstream network infrastructure. These show basic technical hygiene, not trustworthiness of the operator. Evidence:

- Homepage: no legal-entity name, licence, or registration disclosure was visible in the captured content (381 characters of text, all from the interstitial).
- Transport encryption: TLS certificate issued by WE1 at DV (domain-validated) level, valid to 2026-11-30, with 35 days remaining. DV confirms domain control only, not operator identity.
- Registrant data for the domain is incomplete, consistent with ownership opacity.

### What to Verify Next

Any engagement should begin by establishing who operates the service and whether the warning is current. The operator's claimed identity should be confirmed through an independent, offline route, not through contact details on the site. If the service claims to handle exchange, custody, or payment activity, its authorisation should be checked directly with the relevant financial or virtual-asset registry. Official contact and support channels should be confirmed through an independent source. The warning status should be re-checked later, because a compromised site that has been cleaned can be delisted, while an actor-operated one will not be. Evidence:

- The homepage presented a phishing-warning interstitial in place of service content, so the service's actual claims remain unreviewed.
- Archive history is short (first capture Nov 2024, last Mar 2025), so there is no long-standing brand record to cross-reference.
- The shared-subdomain domain structure provides no standalone brand domain that could be matched to a registered company.

### Summary Verdict

The site reads as a young, technically well-formed but unverified web property whose operator remains unidentified and whose reputation is actively contradicted by multiple threat-intelligence detections. Elevated risk is the controlling posture for any sensitive interaction, and the clean behavioural testing and valid certificate do not outweigh the detections. Legitimacy is not established.


### Infrastructure Integrity

The domain resolves entirely to Cloudflare edge addresses (AS13335, Cloudflare, Inc., US, ARIN-registered), which are shared across millions of sites and carry no abuse history. The origin server was not observable, which is expected for this platform. Bot-protection challenges were active during analysis. Protective infrastructure is a mitigating factor only. It reflects the hosting platform's quality rather than the operator's conduct and does not reduce the reputation risk.


### Closing Assessment

Read-only viewing is the most that is proportionate. Account creation, credential entry, wallet connection, and any deposit or payment should be withheld until the operator is independently identified and the active threat detections are resolved or demonstrably cleared.


_Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The structure of the page changed sharply while it was loading. (Behaviour in a sandbox `rule:BEHAV_DOM_DENSITY_SPIKE`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of xexchanger.pages.dev.

- The request stayed on xexchanger.pages.dev. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2024-11-20. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2c49 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-11-30 |
| Domain age | 1.93 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-11-20 |
| Archive snapshots | 11 |
| Reputation | VirusTotal: 2 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about xexchanger.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [votes-hyperswaps-com.pages.dev](https://trustsniffer.com/report/votes-hyperswaps-com.pages.dev), a similar name (Critical Risk, 25/100)
- [votes-okxpolls-79.pages.dev](https://trustsniffer.com/report/votes-okxpolls-79.pages.dev), a similar name (Critical Risk, 0/100)
- [revoes.pages.dev](https://trustsniffer.com/report/revoes.pages.dev), a similar name (Critical Risk, 0/100)
- [vote-okxpolls-180.pages.dev](https://trustsniffer.com/report/vote-okxpolls-180.pages.dev), a similar name (Moderate Trust, 51/100)
- [slerfwth.pages.dev](https://trustsniffer.com/report/slerfwth.pages.dev), a similar name (Moderate Trust, 62/100)
- [calirsprvveb3toksscliam01x.pages.dev](https://trustsniffer.com/report/calirsprvveb3toksscliam01x.pages.dev), a similar name (Moderate Trust, 64/100)
- [cryptoman-whitebit-pay.pages.dev](https://trustsniffer.com/report/cryptoman-whitebit-pay.pages.dev), a similar name (Moderate Trust, 60/100)
- [scarquest-whitelist.pages.dev](https://trustsniffer.com/report/scarquest-whitelist.pages.dev), a similar name (Moderate Trust, 60/100)
- [skywardairlines.com](https://trustsniffer.com/report/skywardairlines.com), another site assessed as moderate-trust (Moderate Trust, 65/100)
- [atomicwallet.io](https://trustsniffer.com/report/atomicwallet.io), another site assessed as moderate-trust (Moderate Trust, 65/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as legitimate](https://trustsniffer.com/directory/verified-legit), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23)
- [How to check if TRC20 USDT is genuine Tether](https://trustsniffer.com/blog/how-to-check-if-trc20-usdt-is-genuine-tether)
- [Stablecoin Freezes, Oct 27, 2026: 7 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-27)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/xexchanger.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/xexchanger.pages.dev · assessed 2026-10-25.*