Is marketlistvotes.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

marketlistvotes.com is a recently registered commercial-style domain. On access, its front page returned a security interstitial from its edge provider, titled as a suspected-phishing warning, instead of any business content. The visitor saw no products, services, branding or operator information, so the site's apparent purpose and business model cannot be established from what it presented. The only observable content is the warning page, which is itself an adverse signal.

Scam/Impersonation Risk

The assessment is cautionary and security-forward. The site is confirmed as blacklisted by external threat-intelligence sources. Multiple security engines classify it as malicious, and two tier-one security vendors are among them. This condition is decisive and was not offset by any positive signal. The automated browser was stopped by a bot-challenge interstitial that described the site as suspected phishing. This is consistent with the external detections and means the homepage could not be inspected for the underlying offer. No conflicting legal entities and no brand impersonation were observed, and no contact-channel anomalies were reported. The risk arises from the external detections together with the domain's very young age. It does not arise from any identity conflict on the pages. Behavioral testing found no wallet-connection attempts, clipboard manipulation, hidden forms or credential posts to external hosts. This does not reduce the weight of the external detections. The site did generate a high volume of outbound requests to third-party hosts, a large burst of page changes after interaction, and repeated console errors. Taken together, these suggest heavily scripted page behavior. Evidence:

• Homepage: access returned a 403 bot-challenge page titled as a suspected-phishing warning.
• Reputation: 12 malicious and 1 suspicious detections across the security engines consulted, including two tier-one vendors; external blacklist confirmed.
• Behavioral runs (3 of 3 completed): 54 external XHR/fetch calls, 5 external POST requests, 18 console errors, and up to 1,503 DOM mutations after interaction.
• Provenance: domain registered 2026-08-07 (~0.22 years old); only 1 archive snapshot, captured 2026-08-07.

Regulatory Verification Notes

The site's real-world operator is not independently verified, and ownership is opaque. The legal and identity pages could not be assessed because no page content beyond the interstitial was captured. No licensing, registration or regulatory standing could therefore be confirmed. Nothing on the site supports an assertion of regulated status. No third-party broker or regulatory-reputation record matched this domain. The external detections are the dominant signal and cannot be offset by any regulatory standing, because none is evidenced. The domain's registrar is a commercial registrar, and a valid certificate is installed. These are baseline hygiene items that malicious sites routinely meet, and they do not establish legitimacy. Evidence:

• Registration: Global Domain Group LLC; created 2026-08-07, expires 2027-08-07; registrant details incomplete.
• Transport security: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-03 (68 days remaining at analysis).
• Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).
• Homepage: no company name, licence number or legal notice was observable on the captured page.

What to Verify Next

The decisive question is whether the external detections are current and whether the site has been cleaned or re-assessed. Check the domain's current status directly with the security vendors that flagged it. Confirm independently, through a registry or an offline route, whether any organisation claiming to operate this domain actually exists. This is especially important if the domain was supplied in an unsolicited message, advertisement or referral. Confirm official contact channels through the publicly known channels of the organisation the domain claims to represent, not through anything presented on the site. Finally, if the domain is presented as belonging to an existing brand, compare it against that brand's officially published domain. Evidence:

• Reputation: the external blacklist status and tier-one vendor detections remain unresolved in the evidence.
• Identity: the identity status of the operator is unknown, and no operator disclosure was captured on the homepage.
• Provenance: the domain is roughly three months old, with a single archive capture, so no independent history exists to rely on.

Summary Verdict

The overall posture is high risk. Confirmed external threat detections, a very recently created domain and an unresolved operator identity converge into a clearly adverse assessment. The site's technical hygiene does not offset the reputational risk.

Infrastructure Integrity

The site is fronted by a major CDN/WAF provider, and all four observed addresses are edge servers. The origin server is not observable, so hosting cannot be independently verified, and the edge layer can mask rapid content changes. The DNS profile combines a young domain with sparse subdomains, an unconfirmed heuristic that fits a newly stood-up property. The edge protection and bot filtering are a mitigating factor only. They do not counter the external threat detections or provide any evidence of legitimacy.

Closing Assessment

Treat the site as unsafe for any sensitive interaction. Do not log in, enter credentials, make payments or connect financial accounts. Limit any contact to passive viewing from an isolated environment, and download nothing from it. If it was reached through an unsolicited link, discard the link and report it.