Is b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app safe? TrustSniffer's low-trust assessment: 35/100

Overview

This is a single-page website titled "Lumen Protocol — Web3 Airdrop & NFT Mint". It is served from a project subdomain on a shared, third-party application-hosting platform rather than from a standalone branded domain. The page presents itself as a web3 token-airdrop and NFT-minting offering, and its apparent purpose is to draw visitors into claiming tokens or minting digital collectibles. A page-level semantic analysis could not be completed, so the specific claims, yields and mechanics on the page are not itemised here.

Scam/Impersonation Risk

Contradictory signals are present, and this is the dominant finding. Multiple independent reputation engines currently flag the site as malicious or suspicious, and it is blacklisted on external threat-intelligence lists. The airdrop-and-mint theme matches a pattern frequently used to lure visitors into wallet-linked actions, so this reputational evidence carries considerable weight. No conflicting legal identities and no brand impersonation were observed. A large body of abuse reports exists against one of the platform's shared edge addresses. Those reports relate to shared infrastructure serving many unrelated tenants and are discounted, so they are not attributed to this site. The sandboxed behavioral runs were consistently benign. They showed no outbound third-party requests, no wallet-connection or wallet-drainer activity, no clipboard manipulation, no hidden or externally posting forms, and no cloaking. The reputational detections nonetheless outweigh this clean behavior, because a page can look inert during automated testing and still be repurposed quickly. Evidence:

• Homepage: four reputation engines flagged the domain (3 malicious, 1 suspicious), and an external blacklist listing is active.
• Shared-infrastructure edge address: 87 abuse reports, discounted as shared-provider noise with a zero confidence rating.
• Homepage behavioral sandbox: 3 of 3 runs succeeded with stable HTTP 200 responses, zero external requests and zero console errors.
• Homepage: no wallet provider was detected, and no drainer or clipboard-write behavior occurred.

Regulatory Verification Notes

The page discloses no regulated status, licence or corporate registration that could be assessed. The site sits on a shared platform subdomain, which means the domain itself offers no independent link to a real-world operator. Real-world identity is therefore unverified, and the available evidence cannot connect the page to any accountable entity. No third-party broker or regulatory-reputation record matched the site, so no external reputational context exists in either direction. This is a disclosure and verification gap in its own right. The elevated risk rests on the reputational detections above, not on this gap alone. Evidence:

• Homepage: no legal entity, licence number or registration reference is presented in the captured content.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US) under a platform-owned subdomain.
• Transport encryption: a DV-level TLS certificate issued by WR1 is valid to 2026-11-27 with 31 days remaining. DV validates only domain control and says nothing about the operator.
• Broker reputation lookup: no match was found.

What to Verify Next

Any claim of association with a named "Lumen Protocol" project should be checked against that project's official domain and social channels, reached through an independent route and not through links on this page. Any airdrop, mint or token-claim instruction should be confirmed through those independent channels before any wallet interaction. If the page makes any financial, custody or regulated-activity claim, the claimed entity should be checked in the relevant national registry. The official support or contact channels should also be confirmed independently. Evidence:

• Homepage title: the "Lumen Protocol" branding is the only identity cue, and nothing corroborates it.
• Reputation checks: the active blacklist listing and engine detections should be re-checked for delisting before any engagement.
• Identity assessment: real-world operator identity remains unverified.

Summary Verdict

The site carries an elevated-risk posture. Active third-party threat detections define the assessment, and the benign behavioral results and sound transport encryption do not offset them. The real-world operator cannot be established, so legitimacy cannot be inferred.

Infrastructure Integrity

The site runs behind a recognised CDN/WAF layer on a major cloud provider. All observed addresses are edge nodes, and the origin server was not observable. This provides baseline availability and transport protection. It is a mitigating factor only and does not demonstrate legitimacy. Edge-only visibility also prevents independent hosting verification and can mask rapid content swaps.

Closing Assessment

Only read-only viewing is appropriate. Wallet connections, credential entry, token claims, mint transactions and any financial interaction should be avoided until independent verification has been completed and the reputation listings have cleared.

Signals weighed against the site

• AbuseIPDB: 87 reports on hosting IP 216.198.79.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.