Security Review

Is us.list-manage.com legit or a scam?

Our verdict:Safe· 71/100

Official Mailchimp marketing subdomain used for legitimate email campaigns and organizational forms with a 20-year domain history.

us.list-manage.comScanned 1h ago
0
Trust score
SAFE
Heuristics 38·MT 88
View density

Analysis Summary

Threat Intelligence
1/92
Engines flagged this URL
Domain Age
20 years old
Registered Apr 18, 2006
MT Intelligence
Safe
Low likelihood · 90% confidence
SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

Screenshot of us.list-manage.com
LIVE RENDER
us.list-manage.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

75
/ 100
Critical visual risk

Visual red flags detected in the screenshot

The page uses a generic Google Form to collect information for a purported statewide event while using a free Gmail account for contact, which is a common pattern for data collection scams.

Visual risk75/100

What our vision model saw

5 signals

Use of a free Gmail address (Robert.America250MI@gmail.com) for a supposedly official statewide event

Request for personal information via a generic Google Form layout

Unprofessional contact information with a missing phone number after the 'cell at' prompt

Lack of official government or organizational branding/domain for a 'statewide' Michigan initiative

High-pressure 'once-in-a-lifetime' phrasing used to encourage participation

Brand Impersonation

medium confidence

The page mentions or styles itself as Google, but is hosted on a domain that is not an official Google property.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust88/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain is an official part of the Mailchimp (Intuit) infrastructure, used globally for newsletter links and subscriber forms. Our analysis confirms the domain was registered over 20 years ago and is managed by a reputable registrar. While one engine in our antivirus network flagged it, this is a common false positive caused by the high volume of automated mail sent through these servers. The page content appears to be a community event application for a Michigan-based initiative, which is a standard use case for this platform. We found no evidence of malicious intent or credential harvesting on this specific subdomain.
Full dossier
Analysis complete

Page Content

The page hosts a 'Sharing the Spirit of America' application form. It uses a standard layout to collect event details such as organization names, locations, and accessibility information. While it uses a Gmail address for contact, this is typical for local community-led initiatives rather than a sign of technical fraud.

Infrastructure

The site is hosted on Mailchimp's dedicated link-management servers. It uses a high-grade DigiCert SSL certificate and is part of a massive global network used by millions of businesses. The hosting IP has a clean reputation with no reports of abuse.

Domain History

The parent domain has been active for over 7,300 days. It is registered to a well-known corporate registrar and has a consistent history of serving marketing content. This longevity is a strong indicator of a legitimate service provider.

Web Reputation

Independent review aggregators and technical databases confirm this is a known Mailchimp asset. Although some spam-reporting forums mention the domain, these complaints are directed at the volume of marketing emails sent via the platform rather than the safety of the domain itself.
Risk Factors
3
  • One minor antivirus engine (Chong Lua Dao) flagged the link, likely due to bulk-mail reputation.
  • The form uses a free Gmail address for its primary contact point.
  • High-volume marketing domains are occasionally abused by third-party spammers to send unsolicited links.
Positive Signals
4
  • Official subdomain of Mailchimp (Intuit), a multi-billion dollar marketing company.
  • Domain age of over 20 years indicates long-term legitimate operation.
  • Valid high-assurance SSL certificate issued by DigiCert.
  • Clean reputation across major hosting and IP abuse databases.
AI Recommendation
It is safe to interact with this page. As with any online form, only provide the information requested for the event and do not enter your primary email or banking passwords.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for us.list-manage.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
20 yrs
Registered Apr 2006
Business registration
Active · United States
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 scam reports · 4 complaints · 3 positive
Key findings
7 headline facts from open-web research
  • us.list-manage.com is an official Mailchimp (Intuit) subdomain used for email tracking, click redirects, signup forms, and campaign links (confirmed on mailchimp.com/about/mcsv-static and multiple technical sources).
  • The domain list-manage.com is approximately 20 years old and registered to Mailchimp infrastructure.
  • Commonly appears in legitimate newsletters; the page title "Sharing the Spirit of America - Application" matches patterns of real organizational application forms distributed via Mailchimp (e.g., community, event, or nonprofit emails).
  • Frequent spam complaints because spammers and phishers abuse Mailchimp to send campaigns or use its domains in phishing emails (Stanford alert on Mailchimp credential theft, Troy Hunt blog).
  • Some security tools and blacklists flag *.list-manage.com due to association with bulk email (e.g., SURBL, SpamCop reports, one "Malicious" flag from Chong Lua Dao).
  • Gridinsoft analysis gives 79/100 trust score and deems it "generally safe" with long domain age and mostly clean provider results.
  • No evidence of this specific subdomain being a Google clone or typosquat; the "Brand reference: Google" in page metadata is likely unrelated or a false positive.
Scam reports (3)
Direct quotes from public scam databases, forums, and news.
  • SpamCop Forumopen

    "I got 99% of the spams from mailchimp servers and spamvertizing their subdomain list-manage."

  • spam.orgopen

    "Registry Complaint - list-manage.com ... Offending Domain: list-manage.com"

  • Reddit r/MailChimpopen

    "Anybody else's *.list-manage.com address been blacklisted?"

Positive reviews (3)
Quotes indicating the site is legitimate.
  • Gridinsoftopen

    "79/100 Trust Score ... Based on current analysis, us.list-manage.com appears to be generally safe. ... legitimate, lower-risk profile"

  • Mailchimp Officialopen

    "You probably found this page because one of our subscribers used Mailchimp to send you an email campaign and you traced a link in the email back here to investigate. Mailchimp is a marketing platform..."

  • Netifyopen

    "list-manage.com is associated with Mailchimp."

Business registration
Status: active · United States

Operated by Mailchimp (Intuit). Domain registered ~20 years ago (matches provided 7372 days age).

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
Our research confirms that us.list-manage.com is an official subdomain used by Mailchimp for email campaign tracking and forms. While we found some complaints on Reddit and SpamCop regarding email volume, these are typical for major marketing platforms. Technical sources and independent trust sites verify the domain is owned by Intuit and has been active for two decades.

Antivirus Engines

Detection matrix · live
1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious0Suspicious57Harmless92Engines
0
of 92
Chong Lua Dao
Malicious· malicious

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
Has contact info, but not on the site's domain
Emails on site's domainNone
Free-mail addressesrobert.america250mi@gmail.com
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No email uses the site's own domain — legitimate shops usually do.
  • Contact address uses a free-mail provider (gmail.com) — unusual for a real business.
  • No phone number listed on the page.
  • No postal address visible on the page.
  • Page impersonates Google on a non-official domain.

Domain & Encryption

Domain History
Age20 years old
RegistrarMarkMonitor Inc.
RegisteredApr 18, 2006
ExpiresApr 18, 2032
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerDigiCert Inc · DigiCert Global G3 TLS ECC SHA384 2020 CA1
ExpiresNov 5, 2026 (133d)
Self-signedNo
Hosting & Technology
HostingAkamai Technologies, Inc.
Server locationUS
Web serverGSE

Redirect Chain

Hops
1
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1302https://us.list-manage.com/vcwircPvgTz?e=3759658f44&c2id=4a90e24cae7f1bb503a6fe35ca28f89e
  • 2200https://docs.google.com/forms/d/e/1FAIpQLSf9AF1lgTbBVLhKJhibm71f1-kZB9TuLjC0EwyhD1SOTnJ35g/viewformcross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPAkamai Technologies, Inc.
Usage typeData Center/Web Hosting/Transit

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on us.list-manage.com and not a lookalike like u-s.list-manage.com.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on us.list-manage.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • us.list-manage.com passed our automated security checks with a trust score of 71/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. us.list-manage.com presents a valid TLSv1.3 certificate issued by DigiCert Inc · DigiCert Global G3 TLS ECC SHA384 2020 CA1, expiring in 133 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • us.list-manage.com is 20.2 years old, registered on 4/18/2006 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 1 out of 92 antivirus engines in our malware network flagged us.list-manage.com as malicious or suspicious (1 outright malicious). Even one detection is a meaningful signal.
  • No. us.list-manage.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • us.list-manage.com resolves to an IP operated by Akamai Technologies, Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 25, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around us.list-manage.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·us.list-manage.com
SAFE

This is a legitimate email tracking and form link operated by Mailchimp, a major marketing platform. While some security filters flag these links due to high email volume, the infrastructure itself is official and safe to use. You should only be cautious if the specific content of the form asks for sensitive passwords.

It is safe to interact with this page. As with any online form, only provide the information requested for the event and do not enter your primary email or banking passwords.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.