Is dappz-uxlinks.vercel.app a scam? TrustSniffer's high-risk assessment: 22/100

Overview

The website is a single-page site hosted as a subdomain on a shared application-hosting platform. Its landing page is titled "Claim Your New UXLINK Tokens Now" and carries roughly four thousand characters of text. It presents itself as a token-claim portal tied to the UXLINK crypto brand. Its apparent purpose is to draw visitors into a claim or airdrop-style action. The site does not show an independently established operator or business model.

Scam/Impersonation Risk

This is a high-risk, confirmed-contradiction case. Several threat-intelligence engines classify the site as malicious, with one more rating it suspicious. An external blacklist listing corroborates this. The convergence of these detections is decisive and is not offset by the site's technically tidy transport layer. The homepage's token-claim framing fits a recognised pattern of crypto "claim your tokens" campaigns. These campaigns use a third-party brand name in a free-hosting subdomain to induce wallet connections or signature approvals. The evidence does not confirm brand impersonation or phishing, and no conflicting legal identities were found. The reputational listings alone place the site in a cautionary tier. The sandbox did not observe wallet-connection prompts, clipboard tampering, hidden credential forms, or cloaking, so no active exploit mechanism was captured during testing. Absence of observed malicious behaviour in three sandbox runs does not offset the external detections, because claim-style lures can change behaviour once a wallet is connected. The site also produced a high volume of client-side errors and repeated outbound data submissions during testing, which points to an unpolished or templated build rather than a maintained product. The site gives no independent link to the UXLINK brand or to any named operator, and the brand reference sits only in the page title and the subdomain name. Evidence:

• Homepage title reads "Claim Your New UXLINK Tokens Now", a token-claim lure that uses a third-party crypto brand name.
• Three engines flag the domain as malicious and one as suspicious (57 rate it harmless, 32 return no verdict), and an external blacklist listing is also present.
• Sandbox: 3 of 3 runs completed with 87 console errors and 6 outbound POST requests, all to recognised destinations. No wallet-connect, drainer, clipboard-hijack, hidden-form or cloaking behaviour was detected.
• The hostname is a free-hosting subdomain whose name embeds the brand term "uxlinks".

Regulatory Verification Notes

The site shows no recognisable regulatory standing, and nothing connects it to a registered or licensed entity. A token-claim portal that asks visitors to act on digital assets would ordinarily be expected to identify its issuer and the terms of the claim. The captured evidence ties the site to no accountable operator and to no verifiable official channel of the brand it invokes. Ownership details are opaque, and the reputational detections point toward a deceptive claim page rather than a legitimate issuer's distribution portal. Together these leave no basis for treating the site as an authorised channel of any token project. Evidence:

• The single captured landing page names no operating company, licence or registration reference.
• Served from AS16509 (AMAZON-02, Amazon.com, Inc., US), a general-purpose cloud network that does not establish the operator's identity.
• TLS certificate issued by WR1 (DV, domain validation only), valid to 2026-11-27, which confirms encryption but not who runs the site.

What to Verify Next

Any claim or distribution tied to UXLINK should be checked only through the project's officially announced channels, reached independently of this site's link, such as the project's own verified website and social accounts. The prospective user should confirm through those channels whether any token claim exists, and should not rely on this page for that confirmation. Anyone who has already visited the page and connected a wallet should review and revoke token approvals using a trusted block-explorer tool. They should also move assets to a fresh wallet if any signature was granted. Organisations should route the domain through their security team for blocking and reporting to the hosting platform's abuse process. Evidence:

• The page's claim framing is the only stated basis for the offer, and it cites no official announcement.
• External detections are current, so the risk is ongoing rather than historical.
• Observed outbound requests during testing were limited to recognised destinations, so no unrecognised data-collection endpoint was captured.

Summary Verdict

The site carries an elevated, clearly cautionary risk posture. Reputational detections from multiple independent sources converge with a lure-style claim page and no verifiable operator. Technical hygiene is present but cannot offset these external findings, and the site's legitimacy is not established.

Infrastructure Integrity

The site is delivered through the shared edge network of a mainstream application-hosting platform on Amazon cloud infrastructure, with a valid certificate. All observed addresses are edge nodes and the origin server is not visible. This is a mitigating factor only and gives no assurance of legitimacy. The abuse reports recorded against one of the edge addresses relate to the shared provider network rather than to this site specifically. They have been discounted accordingly, and the cautionary posture does not depend on them. Because the platform allows anyone to publish a site under its domain, the infrastructure says nothing about who controls this particular page.

Closing Assessment

The site should be treated as suitable for read-only observation at most. Wallet connections, signatures, credential entry, and any financial interaction should be avoided. Any link to it should be reported and blocked rather than forwarded.

Signals weighed against the site

• AbuseIPDB: 84 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.