--- title: "Is b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app Safe? Risk Report, Sc" source: TrustSniffer type: Website trust & fraud report subject: "b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app" verdict: "Low Trust" title: "Is b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app Safe?" trust_score: 35 classification_confidence: 55 canonical_url: https://trustsniffer.com/report/b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app assessed: 2026-10-27 --- # Is b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app safe? TrustSniffer's low-trust assessment: 35/100 ## Verdict **Verdict: Low Trust, trust score 35/100.** b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app is low-trust and potentially risky. Several risk patterns were present. Do not send money or personal details until you have verified this business another way. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-27 by automated analysis. Classification confidence 55%. ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 3 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 87 reports; shared hosting inflates reports) | Clear | | Domain age | Not available (No registration record was returned) | Noted | | Certificate | Encrypted connection (Issued by WR1) | Noted | | Hosted by | AMAZON-02 (Server in US) | Noted | ## The page as captured ![Screenshot of the b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app/screenshots/first.png) _What b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app served when TrustSniffer captured it on 2026-10-27. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Overview This is a single-page website titled "Lumen Protocol — Web3 Airdrop & NFT Mint". It is served from a project subdomain on a shared, third-party application-hosting platform rather than from a standalone branded domain. The page presents itself as a web3 token-airdrop and NFT-minting offering, and its apparent purpose is to draw visitors into claiming tokens or minting digital collectibles. A page-level semantic analysis could not be completed, so the specific claims, yields and mechanics on the page are not itemised here. ### Scam/Impersonation Risk Contradictory signals are present, and this is the dominant finding. Multiple independent reputation engines currently flag the site as malicious or suspicious, and it is **blacklisted** on external threat-intelligence lists. The airdrop-and-mint theme matches a pattern frequently used to lure visitors into wallet-linked actions, so this reputational evidence carries considerable weight. No conflicting legal identities and no brand impersonation were observed. A large body of abuse reports exists against one of the platform's shared edge addresses. Those reports relate to shared infrastructure serving many unrelated tenants and are discounted, so they are not attributed to this site. The sandboxed behavioral runs were consistently benign. They showed no outbound third-party requests, no wallet-connection or wallet-drainer activity, no clipboard manipulation, no hidden or externally posting forms, and no cloaking. The reputational detections nonetheless outweigh this clean behavior, because a page can look inert during automated testing and still be repurposed quickly. Evidence: - Homepage: four reputation engines flagged the domain (3 malicious, 1 suspicious), and an external blacklist listing is active. - Shared-infrastructure edge address: 87 abuse reports, discounted as shared-provider noise with a zero confidence rating. - Homepage behavioral sandbox: 3 of 3 runs succeeded with stable HTTP 200 responses, zero external requests and zero console errors. - Homepage: no wallet provider was detected, and no drainer or clipboard-write behavior occurred. ### Regulatory Verification Notes The page discloses no regulated status, licence or corporate registration that could be assessed. The site sits on a shared platform subdomain, which means the domain itself offers no independent link to a real-world operator. Real-world identity is therefore unverified, and the available evidence cannot connect the page to any accountable entity. No third-party broker or regulatory-reputation record matched the site, so no external reputational context exists in either direction. This is a disclosure and verification gap in its own right. The elevated risk rests on the reputational detections above, not on this gap alone. Evidence: - Homepage: no legal entity, licence number or registration reference is presented in the captured content. - Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US) under a platform-owned subdomain. - Transport encryption: a DV-level TLS certificate issued by WR1 is valid to 2026-11-27 with 31 days remaining. DV validates only domain control and says nothing about the operator. - Broker reputation lookup: no match was found. ### What to Verify Next Any claim of association with a named "Lumen Protocol" project should be checked against that project's official domain and social channels, reached through an independent route and not through links on this page. Any airdrop, mint or token-claim instruction should be confirmed through those independent channels before any wallet interaction. If the page makes any financial, custody or regulated-activity claim, the claimed entity should be checked in the relevant national registry. The official support or contact channels should also be confirmed independently. Evidence: - Homepage title: the "Lumen Protocol" branding is the only identity cue, and nothing corroborates it. - Reputation checks: the active blacklist listing and engine detections should be re-checked for delisting before any engagement. - Identity assessment: real-world operator identity remains unverified. ### Summary Verdict The site carries an elevated-risk posture. Active third-party threat detections define the assessment, and the benign behavioral results and sound transport encryption do not offset them. The real-world operator cannot be established, so legitimacy cannot be inferred. ### Infrastructure Integrity The site runs behind a recognised CDN/WAF layer on a major cloud provider. All observed addresses are edge nodes, and the origin server was not observable. This provides baseline availability and transport protection. It is a mitigating factor only and does not demonstrate legitimacy. Edge-only visibility also prevents independent hosting verification and can mask rapid content swaps. ### Closing Assessment Only read-only viewing is appropriate. Wallet connections, credential entry, token claims, mint transactions and any financial interaction should be avoided until independent verification has been completed and the reputation listings have cleared. _Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 2 findings contributed to this verdict, raised by external reputation, registration and ownership. ### 01 External reputation - Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`) ### 02 Registration and ownership - The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`) ### Signals weighed against the site - AbuseIPDB: 87 reports on hosting IP 216.198.79.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNKNOWN | | Identity score | 50/100 | | Identity verification confidence | 30% | - AI page analysis unavailable (page captured; identity not AI-verified) _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app. - The request stayed on b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app. It was not redirected to another domain. (Clear) - It is hosted on AMAZON-02, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Not available | | Hosting | AMAZON-02 - Amazon.com, Inc., US | | Country | US | | Server IP | 216.198.79.3 | | Name servers | Not available | | CDN / edge network | Detected | | Resolved IP addresses | 8 | | Edge IP addresses | 8 | | Likely origin IP addresses | 0 | | SSL issuer | WR1 | | SSL expiry | 2026-11-27 | | Domain age | Not available (no registration date was returned) | | Domain expiry | Not available | | Archive first seen | Not available | | Archive snapshots | Not counted (archive lookup incomplete) | | Reputation | VirusTotal: 3 flagged \| AbuseIPDB: 0% confidence, 87 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [fluxbeam-solana.vercel.app](https://trustsniffer.com/report/fluxbeam-solana.vercel.app), a similar name (Low Trust, 29/100) - [blasterswaps.vercel.app](https://trustsniffer.com/report/blasterswaps.vercel.app), a similar name (Low Trust, 29/100) - [base-bridge-site.vercel.app](https://trustsniffer.com/report/base-bridge-site.vercel.app), a similar name (Low Trust, 40/100) - [stakestone-stake.vercel.app](https://trustsniffer.com/report/stakestone-stake.vercel.app), a similar name (Low Trust, 29/100) - [fluxbeam-dex.vercel.app](https://trustsniffer.com/report/fluxbeam-dex.vercel.app), a similar name (Low Trust, 29/100) - [frontend-eight-alpha-37.vercel.app](https://trustsniffer.com/report/frontend-eight-alpha-37.vercel.app), a similar name (Low Trust, 31/100) - [node-node-8898-fwaqbwzmv-dappp.vercel.app](https://trustsniffer.com/report/node-node-8898-fwaqbwzmv-dappp.vercel.app), a similar name (Low Trust, 31/100) - [ndq-hunt.vercel.app](https://trustsniffer.com/report/ndq-hunt.vercel.app), a similar name (Low Trust, 41/100) - [crypto-2fy.netlify.app](https://trustsniffer.com/report/crypto-2fy.netlify.app), another .app site assessed as low-trust (Low Trust, 26/100) - [crypto-o0j.netlify.app](https://trustsniffer.com/report/crypto-o0j.netlify.app), another .app site assessed as low-trust (Low Trust, 27/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens) - [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24) - [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer) --- *Source: [TrustSniffer](https://trustsniffer.com/report/b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app · assessed 2026-10-27.*