Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
marketsupportingvotes.vercel.app shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 3 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 90 reports; shared hosting inflates reports | Clear |
| Domain age | 11 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a minimal, single-page site served from a free subdomain of a public application-hosting platform. Its browser title is simply "Vote", and the homepage carries only a few lines of text. It names no product, organisation or service. Its apparent purpose is a voting or poll-style landing page, but the domain name suggests a campaign or promotional theme, and no business model is stated.
Scam/Impersonation Risk
This is a high-risk assessment because contradictory signals are present. Several independent security engines currently flag the site as malicious, and one of them is a major tier-one security vendor. That convergence amounts to a confirmed blacklist-level reputational hit. The site's hostname also closely mimics the hosting platform's own namespace. This is the typical pattern of a disposable, user-created deployment rather than an institutionally operated property. The domain is only days old, and the homepage has almost no substantive content. A page like this fits the profile of throwaway infrastructure used for lures, redirects or credential-harvesting staging. The evidence does not show which of these, if any, applies. A high volume of abuse reports exists against an address on the hosting platform. These have been discounted because they relate to shared platform infrastructure, not to this site specifically. In the sandbox, the page made no external network calls and showed no wallet-connection, clipboard-manipulation, hidden-form or cloaking behaviour. That is a mitigating observation, but it does not offset the external threat detections. No conflicting legal identities were found, and none could be assessed because the site names no entity.
- Homepage: the page title is "Vote" and the visible text is extremely short, with no stated product, operator or service description.
- Domain provenance: the domain was first observed roughly 12 days ago (about 0.03 years old), and the web archive holds a single snapshot, dated 2026.
- Reputation: multiple security engines classify the site as malicious, and an external blacklist flag is active.
- Hosting-platform abuse reports (90) apply to a shared provider address and are discounted as shared-infrastructure noise.
Regulatory Verification Notes
The captured homepage presents no legal entity name, terms of service, privacy policy, licensing statement or registration number. No third-party broker or regulatory reputation entry was matched, so there is no external regulatory context. The absence of licensing information is a disclosure gap only and is not itself evidence of fraud. Here it compounds the confirmed threat detections instead of standing alone. The site gives a visitor no basis to confirm who operates it or under what authority. The identity of the operator is not independently verified.
- Homepage: no company name, jurisdiction, licence or registration reference appears in the captured content.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US), registry ARIN.
- Transport security: TLS certificate issued by WR1 at DV (domain-validated) level, valid to 2026-11-27 with 32 days remaining. DV confirms domain control only and says nothing about the operator.
- Third-party broker reputation: no match.
What to Verify Next
Because the site names no operator, any claim about who runs it must be confirmed through an independent channel. That means checking whether the organisation or campaign it appears to represent actually owns and links to this address. Any licence or registration claim would need to be checked with the relevant registry. Anyone who received the link in a message, advertisement or social post should treat that source as suspect and confirm with the sender through a separate, trusted route. Official contact channels should be taken from the organisation's well-known primary domain and not from this site.
- Hostname: the site sits on a free shared-platform subdomain and not on a domain registered by an identifiable organisation.
- Homepage: no outbound links, contact details or legal pages are present to cross-check.
- Reputation: active third-party malicious detections mean that the referring source also warrants scrutiny.
Summary Verdict
Available evidence supports an elevated-risk posture. Confirmed adverse reputation from several independent sources coincides with a brand-new, near-contentless page, and there is no verifiable operator behind it. The technically clean sandbox behaviour and valid certificate are minor mitigating observations. They do not outweigh the external threat detections or the lack of any demonstrable legitimacy.
Infrastructure Integrity
The site resolves to edge addresses on AS16509 (Amazon) and is fronted by a trusted CDN/WAF layer. All observed addresses are edge nodes, and the origin server was not observable. This hides the true hosting location and makes it easier to swap content quickly without detection. The protection is a mitigating factor for transport and availability only. It cannot offset the reputational findings and is not evidence of legitimacy.
Closing Assessment
The site should not be used for login, credential entry, payments or any financial interaction. At most it should be viewed passively, ideally from an isolated browser environment, and nothing should be downloaded from it. Anyone who has already entered credentials or sent funds should change affected passwords and contact their bank or payment provider promptly.
Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, registration and ownership, behaviour in a sandbox.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
05 Behaviour in a sandbox
- The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE
Signals weighed against the site
- AbuseIPDB: 90 reports on hosting IP 64.29.17.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of marketsupportingvotes.vercel.app.
- The request stayed on marketsupportingvotes.vercel.app. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2026-10-13. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 64.29.17.67 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | 0.03 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2026-10-13 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 3 flagged | AbuseIPDB: 0% confidence, 90 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about marketsupportingvotes.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.