Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
bcsodrc.xyz shows high-risk / scam indicators.
| What this site appears to be | A Chinese-language BNB Chain airdrop page. It asks visitors to connect a wallet, claims holding dividends paid at 16–26%, and gates larger rewards on recruiting 1, 3, 5 or 10 friends. Airdrops are said to be manually reviewed by customer service, and the page asserts 1:1 reserve backing and a verified contract without showing either. The referral-tier structure and unverifiable payout claims indicate a high-risk, recruitment-driven model. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 22 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a single-page, Chinese-language crypto "airdrop" landing page themed around BNB Chain. It invites visitors to connect a wallet and claim tokens, and it promotes "holding dividends" and invite-to-earn reward tiers. Its apparent business model is referral-driven user acquisition that monetises wallet connections and recruitment rather than any disclosed product or service.
Scam/Impersonation Risk
Contradictory signals are present and serious. The domain is currently blacklisted by an external threat-intelligence listing, and the page behaves differently after a visitor interacts with it. Its content shifts substantially once a user engages, which is a strong cloaking indicator and typical of pages that show one face to scanners and another to victims. The on-page mechanics reinforce this. The homepage displays a "live claim feed" in which truncated wallet addresses are shown receiving "holding dividends" of 16% to 26% as "already paid". These figures are unsubstantiated and read as social proof manufactured to prompt a wallet connection. Rewards are gated behind recruitment tiers. One referred friend moves the claim into a "fast track" review, three friends unlock immediate release plus 50%, five friends "double" the final airdrop (+100%), and ten friends offer a chance to join a "community builder" circle. This is a pyramid-style structure in which payout depends on enlisting others. The page also asserts "1:1 reserve mapping with real assets" and a "verified contract address" but displays no contract, audit, reserve attestation, or custodian. Distribution is described as manually approved by "community customer service", an opaque, discretionary step that no one outside the operator can audit. No impersonation of a specific known brand was detected, so the risk here is the recruitment-driven value-extraction model, not brand spoofing. Evidence:
- Homepage: the claim feed lists ten wallet addresses with dividend percentages between 16% and 26% marked as paid, with no transaction proof.
- Homepage: the invitation ladder offers 1, 3, 5 and 10-friend milestones with escalating bonuses of +50% and +100%.
- Homepage: the "1:1 reserve" and "verified contract address" claims appear with no address, audit or reserve evidence behind them.
- Page behavior: a strong content change after interaction was recorded across three sandbox runs, and an external reputation listing flags the domain.
- Domain provenance: registered 2026-09-28 (~22 days old, 0.06 years); the web archive holds 1 snapshot, captured 2026-09-29 (1 year tracked).
Regulatory Verification Notes
The page identifies no operating company, jurisdiction, licence, registration number, terms of service, privacy policy or physical address. It discloses no support channel beyond the "community customer service" it says reviews claims. For a site that solicits wallet connections and promises yield-like returns, this absence is material. It sits on top of the confirmed contradictions above and does not stand alone as a transparency gap. No third-party broker or regulatory-database match exists for the site, and nothing on the page substantiates any regulated status. Real-world operator identity remains unverified. Evidence:
- Homepage: no legal entity, licence, registration number or address; the only footer text is a "2026" copyright line and the slogan "consensus is asset".
- Registration: Namecheap is the registrar, with registrant details redacted by a privacy service, and the registration runs to 2027-09-28.
- Hosting: served from AS138415 (Yancy Limited, HK-registered, IP geolocated in the US).
- Transport encryption: TLS certificate issued by YR1 (DV, domain validation only), valid to 2026-12-27. A valid certificate confirms encryption only, not operator identity.
What to Verify Next
No verification step can make this page safe to engage with, so the useful steps are about protecting assets and identifying scope. Anyone who has already visited should check whether a wallet was connected and, if so, review and revoke token approvals granted to unfamiliar contracts through a reputable approval-management tool. Claimed contract addresses and reserve statements should be checked only through the independent block explorer, never via links or "copy" buttons on the page. Anyone referred to the page should be asked through an independent channel who the referrer is and what they stand to gain. Official project announcements for any claimed BNB Chain token should be sought from sources reached independently of this page. Evidence:
- Homepage: the wallet-connect call to action appears in the header and again in the invitation section.
- Homepage: the "copy" control sits beside the contract-address claim, but no address is displayed.
- Homepage: the recruitment ladder indicates participants may be contacted through personal referral channels.
Summary Verdict
The assessment is a clearly adverse, high-risk posture. Convergent evidence from external reputation listings, the page's behavior after interaction, the referral-tier payout structure and the very recent domain establishes a site built for recruitment and wallet-connection harvesting. Some technical hygiene is present, but it does not offset these findings.
Infrastructure Integrity
The site resolves to hosting at a data-center provider, with multiple origin-candidate IP addresses and no CDN or WAF fronting detected, so no protective layer mitigates the risk. A valid certificate and a normally resolving infrastructure are baseline hygiene, not mitigating factors. The very young domain with sparse subdomain structure is consistent with disposable, campaign-style deployment.
Closing Assessment
The site should not be used for any sensitive action. Wallets should not be connected, no token approvals or signatures should be granted, and no funds or personal data should be submitted. Anyone who has interacted with the page should treat connected wallets as potentially exposed, move assets to a fresh wallet if approvals cannot be confirmed as revoked, and avoid recruiting others into the scheme.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, hosting and network.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of bcsodrc.xyz.
- The request stayed on bcsodrc.xyz. It was not redirected to another domain. Clear
- Registration is published under NAMECHEAP INC. Clear
- DNS for this domain is served by registrar-servers.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-28. Noted
- The earliest public archive of this site is from 2026-09-29. Clear
- It is hosted on YANCYLIMITED-AS-HK, from a server in US. Noted
Domain intelligence
| Registrar | NAMECHEAP INC |
|---|---|
| Hosting | YANCYLIMITED-AS-HK - Yancy Limited, HK |
| Country | US |
| Server IP | 23.235.185.59 |
| Name servers | DNS1.REGISTRAR-SERVERS.COM, DNS2.REGISTRAR-SERVERS.COM |
| CDN / edge network | Not detected |
| Resolved IP addresses | 10 |
| Edge IP addresses | 0 |
| Likely origin IP addresses | 10 |
| SSL issuer | YR1 |
| SSL expiry | 2026-12-27 |
| Domain age | 0.06 years (continuous registration) |
| Domain expiry | 2027-09-28 |
| Archive first seen | 2026-09-29 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about bcsodrc.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.