Is programmable-v4.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This website is a single-page token airdrop claim portal for a token called $V4 on EVM networks. It advertises a rewards pool of 1,257,202 tokens and invites visitors to connect a crypto wallet, check eligibility, complete optional "quests" for allocation multipliers, and sign a claim. Its apparent purpose is to distribute a token allocation to wallets that an unnamed snapshot supposedly qualified, but the operator, funding source, and value flow are not disclosed.

Scam/Impersonation Risk

Threat-intelligence sources currently flag the site, which amounts to a confirmed blacklist-level reputational hit. Two engines classify it as malicious and one as suspicious, and the hit is corroborated by an external blacklist. The page content points the same way. The homepage claims "No signatures needed" and "No approval needed" for the eligibility check, then says a signature is requested "exactly once" at claim time. That wording contradicts itself and pairs with a closing-window countdown and a "Phase 03 / 03" label, which create urgency. The page also shows "Snapshot verified" and "Settles in ~12s" status banners without naming the snapshot, the issuing project, or a contract address, so the figures cannot be checked. This is the standard structure of a wallet-signature lure: urgency, unverifiable eligibility, and a signing step whose scope is never described. The sandbox did not observe wallet-drainer behavior or clipboard hijacking during its runs, but that does not make the claim flow safe. A brand-similarity flag against the hosting platform's own domain was raised. The site is a subdomain on that platform, so this reads as a hosting artifact rather than confirmed impersonation. Abuse reports on a shared platform IP address are discounted, because they apply to shared infrastructure and not to this site specifically. No conflicting legal identities appear. Evidence:

• Homepage FAQ: states that no signature is needed for eligibility checks, then says one is requested when the claim is submitted.
• Homepage: shows a countdown-style "before the window closes" message, a "Snapshot verified" status banner, and a 1,257,202-token pool, with no named issuer, contract, or snapshot source.
• Reputation checks: 2 malicious and 1 suspicious detections, plus an external blacklist listing.
• Shared-platform abuse reports (87 on a neighboring edge IP, rated low confidence and whitelisted as a content delivery network) were discounted as not site-specific.

Regulatory Verification Notes

The page names no legal entity, jurisdiction, registration number, or license. It also lists no audit, terms of service, privacy policy, or contact address, so the governance and ownership picture is opaque. A token distribution that asks for wallet signatures normally comes with at least a named issuer and a published contract, and neither is present here. No licensing claim is made, so there is no claim to verify. The missing disclosures matter because they leave nobody accountable for the claimed allocation. No broker-reputation match exists for this site. Independent connection to a real-world project or person remains unverified. Evidence:

• Homepage: lists no issuer, legal entity, jurisdiction, license, audit, or contract address, and no terms or privacy pages are linked.
• The site's hosting resolves to AS16509 (AMAZON-02, Amazon.com, Inc., US), which indicates only where the content is served and says nothing about the operator.
• The site's transport encryption is a DV certificate issued by WR1, valid to 2026-11-27, which confirms an encrypted connection but no organizational identity.

What to Verify Next

Any claim of an official $V4 airdrop should be confirmed through channels independent of this page, such as the project's established website or announcements reached through a separate route. A genuine program should publish the token contract address, the snapshot date and eligibility criteria, and a security audit. The contract address should be checked on a public block explorer against anything the page asks a wallet to approve. A wallet signature request should be inspected to confirm it is a plain message and not a token approval or transaction. Official support and contact channels should be confirmed through an independent route. Evidence:

• Homepage: says eligibility comes from an unnamed snapshot and gives no published criteria.
• Homepage FAQ: says the base allocation derives from wallet age and transaction history, a formula that cannot be reproduced.
• Homepage: lists six supported networks (Ethereum, Base, Arbitrum, BNB Chain, Polygon, Optimism), each of which would need a separate contract check.

Summary Verdict

The available evidence supports a high-risk, clearly cautionary assessment. Hard external threat detections, content that contradicts itself, and the absence of any accountable operator converge on the same conclusion. The site shows only baseline technical hygiene, which does not offset these findings.

Infrastructure Integrity

The site is served from addresses within Amazon's network, behind a recognized CDN/WAF platform. All six observed addresses are edge servers, and the origin was not observable. The certificate is valid and issued by a known authority, and the infrastructure is stable. These are mitigating factors only. They say nothing about the operator's legitimacy, and the same edge-only visibility makes it harder to verify hosting independently or to detect quick content swaps.

Closing Assessment

Limited, read-only viewing is the only proportionate use of this site. Wallets should not be connected and nothing should be signed. Anyone who already interacted with it should treat that wallet as potentially exposed and review and revoke any token approvals.

Signals weighed against the site

• AbuseIPDB: 87 reports on hosting IP 64.29.17.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.