Is marketrankinghub-ux.netlify.app a scam? TrustSniffer's high-risk assessment: 4/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page application published on a free subdomain of a general-purpose web hosting platform. Its homepage is titled "Token listing vote". The page presents itself as a community voting or ranking interface for cryptocurrency token listings. Its apparent purpose is to collect participation around token listings, but no page analysis independently establishes who operates it or what it does with that participation.

Scam/Impersonation Risk

Contradictory signals are present, and they are decisive. The site is blacklisted by external reputation sources. Multiple security engines classify it as malicious, including three tier-one vendors, and the count is high enough to trigger an automatic protective ceiling on the assessment. The framing of the page (a token-listing vote) matches a pattern commonly used to lure visitors into wallet interactions or credential entry, so the detections should be taken at face value. The behavioural sandbox did not observe wallet-connection prompts, clipboard tampering, hidden forms, password forms posting to third parties, or content cloaking across three successful runs. This does not offset the detections: a page can be benign during a short automated visit and still be used in a campaign. The page did load a notable volume of third-party content in the background, and a meaningful share of those requests went to destinations outside the commonly trusted set. Two abuse reports exist against a network address in the hosting provider's shared pool. They concern shared infrastructure rather than this site specifically, and they have been discounted accordingly. No conflicting legal identities and no confirmed brand impersonation were observed. The elevated risk rests on the external threat detections. Evidence:

• Homepage: titled "Token listing vote", a framing consistent with listing-vote lures used to attract crypto users.
• External reputation: the domain is flagged malicious by several independent security engines, including Fortinet, Kaspersky and Sophos. The detection count reaches double digits.
• Behavioural sandbox: 3 of 3 runs succeeded. 15 external background requests were observed, 9 of them to non-whitelisted destinations. No wallet-connect, clipboard-hijack, hidden-form or cloaking activity was recorded.
• Abuse reports: 2 reports against a shared hosting-provider address, attributed to shared infrastructure and discounted.

Regulatory Verification Notes

No regulator, licence, or registration is associated with the site. No third-party broker or regulatory-database match exists for this domain, and the available evidence does not connect the site to any identifiable company or individual. That is a verification gap and not by itself evidence of fraud. The site's address is a subdomain on a shared hosting platform, so the domain provides no independent signal of the operator's identity. The valid transport-encryption certificate belongs to the hosting platform and covers its subdomains. It confirms that connections to the site are encrypted. It says nothing about the legitimacy of whoever publishes the page. Identity is therefore unverified, and nothing on the site supports treating it as a regulated or licensed service. Evidence:

• Homepage: no company name, licence or registration number was available in the captured content to link the page to a legal entity.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, OV validation, subject organization Netlify, Inc, valid to 2027-03-19.
• Third-party broker intelligence: no match for this domain.

What to Verify Next

The primary step is to establish, through channels independent of this site, who runs the "token listing vote" and whether any real project or exchange has announced it. Any claim about a token listing or vote should be checked against the official website or announcement channels of the project concerned, reached by an address typed in manually and not through a link from this page. Visitors who arrived through a message, social post, or advertisement should treat the sender as unverified and report the message. The domain's current standing should be re-checked with the major threat-intelligence services before any further interaction. If any official support or contact channel is needed, it should be confirmed offline or through the project's own verified channels. Evidence:

• Homepage: the vote concept names no verifiable sponsoring project or exchange in the analysed content.
• Reputation: current detections stand across independent engines, so a later clean result should be confirmed rather than assumed.
• Hosting: the site sits on a shared platform subdomain, so independent confirmation of the operator is needed.

Summary Verdict

The overall posture is high risk and clearly cautionary. Independent threat detections are decisive. The site's technical hygiene and clean behavioural runs do not outweigh them. Operator identity is unverified, so no claim of legitimacy can be supported.

Infrastructure Integrity

The site is delivered through Amazon's content-delivery and web-protection layer, and every observed address is an edge node. The origin server was not observable. The platform's certificate is valid and issued by a known authority. This is a mitigating factor only. It shows the site runs on mainstream infrastructure, but it cannot offset the reputation risk. Content on shared platforms of this kind can be replaced quickly, and the edge-only view prevents independent confirmation of what sits behind it.

Closing Assessment

The site should be treated as read-only at most. Visitors should not log in, enter credentials, connect a wallet, or make any payment or financial commitment through it.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.