Is marketsupportingvote.vercel.app a scam? TrustSniffer's high-risk assessment: 24/100

Overview

This website is a single-page site on a free subdomain of a shared application-hosting platform, with the title "Vote" and only a few lines of text. It presents a minimal voting-themed landing page with no visible product, company profile or service description. Its apparent purpose is unclear from what it shows: it could be a throwaway placeholder or a staging page for a campaign that has not been built out.

Scam/Impersonation Risk

The site carries confirmed contradictory signals. Multiple independent threat-intelligence engines classify the domain as malicious, and one more flags it as suspicious. This places it on a confirmed external blacklist. The detections are attributed to the site's own hostname, so they are not shared-infrastructure noise. No brand impersonation and no conflicting legal identities were observed. The risk therefore rests on the blacklist and on the site's profile: it appeared only days ago, and it is a bare "Vote" page that would suit a staging area for credential or action harvesting. The behavioural sandbox found no external data submissions, wallet prompts, clipboard manipulation, hidden forms or cloaking across three runs, which is a mitigating observation. It does not outweigh the blacklist. The page showed heavy DOM rewriting after interaction and several console errors, which fits a hastily assembled or script-driven page. Because the content stays minimal until a visitor interacts, its behaviour could change without notice. Evidence:

• Homepage: the captured page contains only a very short text block under the title "Vote", with no product, operator or service description.
• Domain provenance: the domain was first seen in the web archive on 2026-10-12, with 2 snapshots through 2026-10-16 (about 13 days old, 1 year tracked).
• Reputation: two engines rated the hostname malicious and one suspicious, while a large majority of the remaining engines rated it harmless or undetected.
• Homepage behaviour: after interaction the sandbox recorded 1,408 DOM mutations and 6 console errors, with no external requests and no cloaking.

Regulatory Verification Notes

The site presents no legal, compliance or operator information. The captured page has no terms, privacy statement, company name, registration number or licence reference, so the disclosure state is unclear. Real-world operator identity is unverified, and nothing on the page lets a visitor tie it to an accountable entity. Nothing on the site suggests it handles regulated financial activity, and no third-party broker-rating record matches it. Those gaps are verification issues and do not, on their own, indicate fraud. They matter here only because they coincide with the blacklist and the very recent origin. Evidence:

• Homepage: no company name, licence, registry number or legal pages are present in the captured content.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US) on an address assigned to the hosting platform.
• Transport encryption: the TLS certificate is domain-validated only, issued by WR1 and valid to 2026-11-27 (32 days remaining), which confirms encryption but not operator identity.

What to Verify Next

Any contact with this site should start from an independent route to whoever shared the link. The sender's identity and the purpose of the "Vote" page should be confirmed through a channel not reached via this page. The security team should re-check the hostname against current threat-intelligence listings before any allow-listing, and watch for the page content changing from its current minimal state. The official support or contact channels of any organisation claiming to run the vote should be confirmed through that organisation's established, separately known website. Evidence:

• Homepage: the page names no organisation or campaign that could be validated against an independent record.
• Domain history: archive coverage consists of 2 snapshots within days of each other, so there is no earlier version to compare against.
• Reputation: the current blacklist classification is the main reference point for any later re-assessment.

Summary Verdict

The site is assessed at an elevated risk level, with a clearly cautionary posture. Confirmed external blacklist detections, a very new presence and an unidentified operator outweigh its technically clean behaviour. Only low-stakes observation is consistent with this posture.

Infrastructure Integrity

The site is hosted on the Vercel platform, running on Amazon cloud address space (AS16509), and all eight observed addresses are edge servers. The origin server was not observable. This is a mitigating factor only. The 87 abuse reports against the primary address are discounted: they apply to a shared provider address used by many unrelated tenants and carry a zero abuse-confidence rating, so they do not reflect on this site. Edge-only visibility prevents independent hosting verification, and a free shared subdomain makes rapid content swaps easy. Protective infrastructure cannot offset the external threat detections.

Closing Assessment

The site should be viewed read-only at most, ideally from an isolated environment. No credentials, personal details, wallet connections or payments should be entered, and any link or file received from it should be treated as untrusted until it is removed from threat listings and its operator is independently identified.

Signals weighed against the site

• AbuseIPDB: 87 reports on hosting IP 216.198.79.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.