Is bullanaonsol.com a scam? TrustSniffer's high-risk assessment: 2/100

Overview

This website is a single-page promotional landing site for a cryptocurrency token called "$BULLANA". Its homepage carries the headline "$BULLANA Airdrop — Allocation Is Live" and about three hundred characters of visible text. It appears to be a token-giveaway page. The domain name also references "sol", which suggests a Solana-themed token offering. The apparent purpose is to draw visitors into claiming a promised token allocation.

Scam/Impersonation Risk

Multiple independent threat-intelligence engines currently flag the domain as malicious, and an additional engine rates it suspicious. This is a confirmed blacklist condition and the decisive element of the assessment. The lure on the homepage is the airdrop claim: "allocation is live" creates urgency around a free token distribution. Airdrop pages of this kind are a common vehicle for wallet-draining and credential-harvesting schemes. The page is extremely thin and shows no product description, team, roadmap or documentation that would substantiate the token. The sandbox did not observe a wallet-connection prompt, clipboard manipulation, hidden forms or cloaking during its three runs. That absence does not offset the blacklist hits, because those interactions may be gated behind user actions the sandbox did not perform. The sandbox did record outbound behavior consistent with the concern. Six data submissions went to third-party destinations outside the site's own infrastructure, all to non-whitelisted endpoints. Roughly three in five of the external script calls also went to non-whitelisted destinations, and the page produced a high count of console errors, which suggests hastily assembled or unstable code. No conflicting legal identities or brand impersonation were identified. The risk rests on the blacklist status, the domain's very recent creation, and the data-exfiltration-like request pattern. Evidence:

• Homepage: headline "$BULLANA Airdrop — Allocation Is Live", with minimal supporting content and no verifiable project documentation.
• Domain registered 2026-07-03 (~0.32 years old); the web archive holds only 2 snapshots, spanning 2026-07-03 to 2026-07-21 (1 year tracked).
• Behavioral sandbox: 6 of 6 external POST requests and 6 of 9 external XHR calls went to non-whitelisted destinations; 11 console errors were recorded.
• Reputation checks: 5 engines rated the domain malicious and 1 suspicious.

Regulatory Verification Notes

The homepage names no operating company, registered address, license or registration number, and no terms, privacy or legal pages were evident in the captured content. For a token distribution that invites users to claim an asset, this is a material disclosure gap, but on its own it would be a verification gap rather than proof of fraud. Here it compounds the confirmed threat listings. No third-party broker or regulatory-database match exists for the domain, so no external body vouches for the project. The valid transport-encryption certificate confirms only an encrypted connection and domain control. It is a basic domain-validated certificate and carries no assurance about the operator's identity or honesty. The registrar is a commercial registrar, and the registration details are masked under privacy rules. That is administrative and is not treated as a finding. Evidence:

• Homepage: no company name, jurisdiction, license or registration identifier is displayed.
• TLS certificate issued by WE1 (DV), valid to 2026-11-29 (33 days remaining).
• Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com; registration expires 2027-07-03.
• Served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any claim to a "$BULLANA" allocation should be tested against the project's official channels, reached through an independent route and not through links on this page. The token contract address should be confirmed on a public blockchain explorer, along with who deployed it and whether it has a genuine holder base and trading history. The site's request for any wallet connection or transaction signature should be treated as unconfirmed until the project's existence is established independently. The official contact channels should also be confirmed. Anyone who has already interacted with the page should review and revoke wallet permissions and move assets to a fresh wallet if signing occurred. Evidence:

• Homepage: the airdrop claim is the only substantive content, so there is nothing on-site to cross-check it against.
• No third-party broker or registry record could be matched to this domain.
• Outbound data submissions to non-whitelisted endpoints were observed during the sandbox runs.

Summary Verdict

The site's overall posture is high-risk. Confirmed threat-intelligence detections are decisive, and nothing in the site's content, age or disclosures offsets them. Its very recent creation and thin, claim-driven content reinforce the cautionary assessment. Its legitimacy cannot be established, and real-world operator identity remains unverified.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN/WAF, and all observed addresses are edge servers. The origin server was not observable. This protective layer is a mitigating factor only. It does not offset the reputation risk, and edge-only visibility prevents independent hosting verification and can mask rapid content swaps. Shared Cloudflare infrastructure is widely used by legitimate and malicious sites alike, so it adds no assurance about this operator.

Closing Assessment

The site should be treated as unsafe for any sensitive interaction. Wallet connections, transaction signing, credential entry and any payment or financial activity should not occur here. At most, passive viewing is appropriate, and any token or allocation claim should be pursued only through independently verified official sources.