---
title: "Is bullanaonsol.com a Scam? Trust Score 2/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "bullanaonsol.com"
verdict: "Critical Risk"
title: "Is bullanaonsol.com a Scam? Risk Report, Score 2/100"
trust_score: 2
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/bullanaonsol.com
assessed: 2026-10-27
---

# Is bullanaonsol.com a scam? TrustSniffer's high-risk assessment: 2/100

## Verdict


**Verdict: Critical Risk, trust score 2/100.** bullanaonsol.com shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk

Assessed 2026-10-27 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 5 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 4 months old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (2 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the bullanaonsol.com homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/bullanaonsol.com/screenshots/first.png)

_What bullanaonsol.com served when TrustSniffer captured it on 2026-10-27. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This website is a single-page promotional landing site for a cryptocurrency token called "$BULLANA". Its homepage carries the headline "$BULLANA Airdrop — Allocation Is Live" and about three hundred characters of visible text. It appears to be a token-giveaway page. The domain name also references "sol", which suggests a Solana-themed token offering. The apparent purpose is to draw visitors into claiming a promised token allocation.


### Scam/Impersonation Risk

Multiple independent threat-intelligence engines currently flag the domain as malicious, and an additional engine rates it suspicious. This is a confirmed **blacklist** condition and the decisive element of the assessment. The lure on the homepage is the airdrop claim: "allocation is live" creates urgency around a free token distribution. Airdrop pages of this kind are a common vehicle for wallet-draining and credential-harvesting schemes. The page is extremely thin and shows no product description, team, roadmap or documentation that would substantiate the token. The sandbox did not observe a wallet-connection prompt, clipboard manipulation, hidden forms or cloaking during its three runs. That absence does not offset the blacklist hits, because those interactions may be gated behind user actions the sandbox did not perform. The sandbox did record outbound behavior consistent with the concern. Six data submissions went to third-party destinations outside the site's own infrastructure, all to non-whitelisted endpoints. Roughly three in five of the external script calls also went to non-whitelisted destinations, and the page produced a high count of console errors, which suggests hastily assembled or unstable code. No conflicting legal identities or brand impersonation were identified. The risk rests on the blacklist status, the domain's very recent creation, and the data-exfiltration-like request pattern. Evidence:

- Homepage: headline "$BULLANA Airdrop — Allocation Is Live", with minimal supporting content and no verifiable project documentation.
- Domain registered 2026-07-03 (~0.32 years old); the web archive holds only 2 snapshots, spanning 2026-07-03 to 2026-07-21 (1 year tracked).
- Behavioral sandbox: 6 of 6 external POST requests and 6 of 9 external XHR calls went to non-whitelisted destinations; 11 console errors were recorded.
- Reputation checks: 5 engines rated the domain malicious and 1 suspicious.

### Regulatory Verification Notes

The homepage names no operating company, registered address, license or registration number, and no terms, privacy or legal pages were evident in the captured content. For a token distribution that invites users to claim an asset, this is a material disclosure gap, but on its own it would be a verification gap rather than proof of fraud. Here it compounds the confirmed threat listings. No third-party broker or regulatory-database match exists for the domain, so no external body vouches for the project. The valid transport-encryption certificate confirms only an encrypted connection and domain control. It is a basic domain-validated certificate and carries no assurance about the operator's identity or honesty. The registrar is a commercial registrar, and the registration details are masked under privacy rules. That is administrative and is not treated as a finding. Evidence:

- Homepage: no company name, jurisdiction, license or registration identifier is displayed.
- TLS certificate issued by WE1 (DV), valid to 2026-11-29 (33 days remaining).
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com; registration expires 2027-07-03.
- Served from AS13335 (Cloudflare, Inc., US).

### What to Verify Next

Any claim to a "$BULLANA" allocation should be tested against the project's official channels, reached through an independent route and not through links on this page. The token contract address should be confirmed on a public blockchain explorer, along with who deployed it and whether it has a genuine holder base and trading history. The site's request for any wallet connection or transaction signature should be treated as unconfirmed until the project's existence is established independently. The official contact channels should also be confirmed. Anyone who has already interacted with the page should review and revoke wallet permissions and move assets to a fresh wallet if signing occurred. Evidence:

- Homepage: the airdrop claim is the only substantive content, so there is nothing on-site to cross-check it against.
- No third-party broker or registry record could be matched to this domain.
- Outbound data submissions to non-whitelisted endpoints were observed during the sandbox runs.

### Summary Verdict

The site's overall posture is high-risk. Confirmed threat-intelligence detections are decisive, and nothing in the site's content, age or disclosures offsets them. Its very recent creation and thin, claim-driven content reinforce the cautionary assessment. Its legitimacy cannot be established, and real-world operator identity remains unverified.


### Infrastructure Integrity

The site is fronted by Cloudflare's CDN/WAF, and all observed addresses are edge servers. The origin server was not observable. This protective layer is a mitigating factor only. It does not offset the reputation risk, and edge-only visibility prevents independent hosting verification and can mask rapid content swaps. Shared Cloudflare infrastructure is widely used by legitimate and malicious sites alike, so it adds no assurance about this operator.


### Closing Assessment

The site should be treated as unsafe for any sensitive interaction. Wallet connections, transaction signing, credential entry and any payment or financial activity should not occur here. At most, passive viewing is appropriate, and any token or allocation claim should be pursued only through independently verified official sources.


_Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

4 findings contributed to this verdict, raised by external reputation, history in the web archive, hosting and network, behaviour in a sandbox.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

### 03 Hosting and network
- The domain was registered between three and six months ago. (Hosting and network `rule:DNS_YOUNG_6M`)

### 04 Behaviour in a sandbox
- A large share of what the page loaded came from other domains. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_MODERATE`)
- The page exchanged network traffic with destinations TrustSniffer does not recognise. (Behaviour in a sandbox `rule:BEHAV_NONWHITELISTED_TRAFFIC`)
- The page sent data to a destination TrustSniffer does not recognise. (Behaviour in a sandbox `rule:BEHAV_NONWHITELISTED_POSTS`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of bullanaonsol.com.

- The request stayed on bullanaonsol.com. It was not redirected to another domain. (Clear)
- Registration is published under PDR Ltd. d/b/a PublicDomainRegistry.com. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-07-03. (Noted)
- The earliest public archive of this site is from 2026-07-03. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | PDR Ltd. d/b/a PublicDomainRegistry.com |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3032::ac43:9677 |
| Name servers | ATHENA.NS.CLOUDFLARE.COM, COLIN.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-11-29 |
| Domain age | 0.32 years (continuous registration) |
| Domain expiry | 2027-07-03 |
| Archive first seen | 2026-07-03 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 5 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about bullanaonsol.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [revenuehttp.com](https://trustsniffer.com/report/revenuehttp.com), another .com site assessed as critical-risk (Critical Risk, 21/100)
- [dagtaxupdate.com](https://trustsniffer.com/report/dagtaxupdate.com), another .com site assessed as critical-risk (Critical Risk, 0/100)
- [revenueworking.com](https://trustsniffer.com/report/revenueworking.com), another .com site assessed as critical-risk (Critical Risk, 0/100)
- [revenuehoursend.com](https://trustsniffer.com/report/revenuehoursend.com), another .com site assessed as critical-risk (Critical Risk, 0/100)
- [vieveijvejibvebverhrh.com](https://trustsniffer.com/report/vieveijvejibvebverhrh.com), another .com site assessed as critical-risk (Critical Risk, 6/100)
- [onrevault.com](https://trustsniffer.com/report/onrevault.com), another .com site assessed as critical-risk (Critical Risk, 0/100)
- [roblnhoods.com](https://trustsniffer.com/report/roblnhoods.com), another .com site assessed as critical-risk (Critical Risk, 0/100)
- [roblnhoodl.com](https://trustsniffer.com/report/roblnhoodl.com), another .com site assessed as critical-risk (Critical Risk, 0/100)
- [claim-taurobotics.com](https://trustsniffer.com/report/claim-taurobotics.com), another .com site assessed as critical-risk (Critical Risk, 0/100)
- [sentioai.pages.dev](https://trustsniffer.com/report/sentioai.pages.dev), another site assessed as critical-risk (Critical Risk, 5/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24)
- [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer)
- [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/bullanaonsol.com) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/bullanaonsol.com · assessed 2026-10-27.*