Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
coinmarketcap-vote-click-v21.netlify.app shows high-risk / scam indicators.
| What this site appears to be | A CoinMarketCap-styled token listing vote page for a meme token that requires a wallet signature and an ETH or token balance to vote, promises fast-track CoinMarketCap listing review, and offers no verifiable proof of CoinMarketCap affiliation, audit, or market data. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 2 reports; shared hosting inflates reports | Clear |
| Domain age | 18 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a single-page portal styled as a CoinMarketCap "Community Vote" for a meme token's exchange listing. It invites visitors to connect a crypto wallet, sign a message described as gasless, and "cast a free vote". Voting is gated by a native ETH balance or a token holding, and the page promises a fast-track listing review for top-ranked projects. Its apparent purpose is a token-promotion and wallet-engagement funnel, not an operating business.
Scam/Impersonation Risk
Contradictory signals are present. The domain is blacklisted by external threat-intelligence sources, which is a confirmed adverse listing and the decisive factor in this assessment. The page also borrows CoinMarketCap's navigation, branding and copyright line, while its own text states that the token "is not verified by CoinMarketCap". It supplies no verifiable affiliation with that platform. The headline "The community listing vote is live on CoinMarketCap" and the "secure voting page" call-to-action therefore contradict the page's own disclaimer. No conflicting legal entities were found, so there is no identity contradiction in the strict sense. The hostname does, however, place a well-known brand name on a free third-party hosting subdomain, which is a common pattern in brand-borrowing campaigns. The page's credibility furniture is unsupported:
The scenario is high-stakes because a wallet signature and balance check are the entry condition, and the page never explains how a vote becomes a listing decision or whether any fee applies. Two abuse reports exist against a shared content-delivery address used by this site. They are attributed to the shared provider infrastructure and are discounted. They are not treated as evidence against this site.
- An "Audit Status: CertiK Verified" label appears with no report link.
- A tokenomics split is shown (1B supply, 55% community, 25% liquidity pool, 12% ecosystem and rewards, 8% team and advisors).
- A "Vote Rank #2" badge and a "recent votes" feed are shown.
- Market cap, volume, liquidity and contract fields are all blank or placeholders.
- The page itself admits that no DEX pool exists for the token.
- The homepage presents a "VOTE LIVE" banner and a "Continue" button, and it carries CoinMarketCap copyright and menu items alongside a statement that the token is unverified.
- The homepage shows a CertiK "verified" audit label, a tokenomics breakdown and a vote rank, with no contract address, audit link or market data behind them.
- The domain was registered in 2026 and is about 17 days old.
- The web archive holds 1 snapshot, from 2026, so the site has no meaningful history.
- Sandbox runs of the homepage recorded about 204 external background requests and 39 external POST requests, 9 of them to non-whitelisted destinations. A wallet-signature request and a balance gate were also flagged.
Regulatory Verification Notes
The site has no legal, terms, about or contact pages that name an operating company, registration number, licence or regulator. It also makes no regulatory claim that could be checked. Operator identity therefore remains unverified, and ownership opacity applies. This is a verification gap in its own right. In this case it sits alongside confirmed adverse listings and a financially sensitive wallet-signing flow, which together make the gap material. The page describes no fee terms, custody arrangements, or user protections for a mechanism that asks for a wallet signature. No third-party broker or regulatory-database entry exists for the site, and that absence does not create a finding. Its transport encryption is valid and organisation-validated, and it is issued to the hosting platform rather than to any token project or to CoinMarketCap. Valid encryption therefore establishes only that the connection is protected, not who operates the page.
- The homepage contains no company name, registered address, licence number or regulator reference.
- The homepage lists no fee schedule, terms of use or privacy policy.
- The TLS certificate was issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), to the subject organisation Netlify, Inc, valid to 2027-03-19.
- The site is served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
What to Verify Next
Any claim of CoinMarketCap affiliation should be checked only through the platform's official channels, reached independently of this page. That check should confirm whether any such community vote exists and whether the named token is under review. The token's contract address, audit report and liquidity pool should be checked on a public blockchain explorer and in the audit firm's own published reports. This is necessary because the page publishes none of them and shows only example contracts for major stablecoins. The official support and contact channels of any project promoting the vote should be confirmed through an independent route. Operator identity and any fee or custody terms should be obtained in writing before any wallet interaction is considered.
- The homepage's example contract parameters reference well-known stablecoin addresses, not the token being promoted.
- The "Info & Links" and market sections of the homepage show a "No DEX pool found" notice and "Loading markets..." placeholders.
- The page's contract, supply and market-cap fields are empty.
Summary Verdict
The assessment is critical and clearly cautionary. Confirmed adverse threat listings, a wallet-signing funnel built on an unsupported brand association, and an unverified operator together outweigh the site's technically sound presentation. Observable evidence is consistent with a deceptive wallet-engagement or token-promotion scheme, and the site does not read as a legitimate listing service.
Infrastructure Integrity
The site is delivered through Amazon's content-delivery edge, and all four observed addresses are edge nodes. The origin server was not observable. This protection is a mitigating factor only. It adds no legitimacy and does not offset the reputational and behavioural risks. Shared edge hosting can also allow content to be swapped quickly without any change in the visible network footprint.
Closing Assessment
The site should be treated as unsafe for any login, credential entry, wallet connection, message signing or financial interaction, and read-only viewing is the only appropriate use. Anyone who has already connected a wallet or signed a message should review and revoke token approvals and consider moving assets to a fresh wallet.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, page content, hosting and network, several checks together.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Page content
- The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
04 Several checks together
- Several independent checks pointed to risk at the same time.Several checks together
rule:HYB_MULTIPLE_MODULES_HIGH_RISK
Signals weighed against the site
- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of coinmarketcap-vote-click-v21.netlify.app.
- The request stayed on coinmarketcap-vote-click-v21.netlify.app. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2026-10-02. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | 0.05 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2026-10-02 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 2 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about coinmarketcap-vote-click-v21.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.