Is bncb.club a scam? TrustSniffer's high-risk assessment: 4/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

BNCB.club is a single-page crypto reference site for BNCB, a token on BNB Smart Chain that is presented as a 1:1 tokenized certificate tracking Nasdaq-listed CEA Industries (ticker BNC). It shows a live-style price ticker, market capitalization, trading volume, DEX liquidity, holder count and contract address. It also offers links to trading venues, a "Check Rewards Eligibility" prompt and a "zero conversion fee" conversion claim. It appears to work as an unaffiliated promotional and referral surface for a young financial token. The page discloses no revenue mechanism.

Scam/Impersonation Risk

Confirmed contradictory signals are present, so the site is blacklisted by external reputation sources, and a major security vendor currently flags the domain. A few further reputation sources rate it as suspicious. No brand impersonation, phishing form or conflicting legal identities were detected, and the homepage has no login or credential form. The concern is the mismatch between what the page claims and what its own figures support. The homepage calls BNCB "the official Binance bStocks certificate" for CEA Industries, yet it also disclaims being the official site of either Binance or CEA Industries. That leaves a visitor unable to tell who stands behind the product. The displayed numbers do not reconcile: the stated all-time low of $4.71 sits above the live price of $4.660, which is impossible. The $29.17M market capitalization also exceeds what the quoted price and the roughly 4.83M circulating supply imply, which is about $22.5M. The page pairs these inconsistent figures with a roughly 39,000-holder count and a "listed 14 Sep 2026" date, which look like credibility cues. It adds "1:1 conversion", "zero conversion fee" and "rewards eligibility" calls to action that push visitors toward Binance Spot, PancakeSwap, DexScreener and CoinMarketCap. Browser testing recorded several outbound POST requests to destinations outside the site's expected partners and a heavy share of third-party network traffic. This is a suspicious network pattern, though no wallet-drainer, clipboard-hijack or cloaking behavior was observed. Evidence:

• Homepage: states the token is an official Binance certificate while disclaiming official status for Binance and CEA Industries.
• Homepage market panel: all-time low ($4.71) above current price ($4.660); market cap ($29.17M) inconsistent with price times supply.
• Behavioral testing of the homepage: three outbound POST requests to non-whitelisted destinations across three successful runs.
• Domain registered 2026-09-25 (~0.07 years, about 24 days old); 1 archive snapshot, all in 2026 (1 year tracked).

Regulatory Verification Notes

The site claims no license and cites no regulator or registration number. Its only legal content is a set of disclaimers: it is not an offer of securities, not financial advice, and not the official site of CEA Industries or Binance, and it names a jurisdiction. These statements disclaim responsibility but do not establish who operates the page or under what authority. No third-party broker or regulatory record matched this site, so no outside reputational context supports it. Real-world operator identity remains unverified, and the page's mix of equity-linked language with a token structure is a legal status it cannot substantiate on its own. The domain was registered through NICENIC International Group, and the page shows no separate corporate-registration disclosure. Evidence:

• Homepage disclaimers: non-affiliation, not-an-offer and not-financial-advice statements, with no named operator, license or registration number.
• Hosted on AS13335 (Cloudflare, Inc., US); domain registered via NICENIC International Group Co., Limited, expiring 2027-09-25.
• TLS certificate issued by YE2 (DV, domain-validated only), valid to 2026-12-27, which establishes encryption but not organizational identity.

What to Verify Next

Any claim of an official Binance or CEA Industries relationship should be checked directly with those organizations through channels reached independently of this site. The token's contract details and any listing on the named exchange should be compared with the issuer's own published information. Price, supply and market-cap figures should be taken only from the exchange or an independent market-data service, never from this page. Official support and contact channels should also be confirmed offline. Whether any securities or tokenized-equity offering is authorized in the user's jurisdiction should be confirmed with the relevant financial regulator. Evidence:

• Homepage: the contract address and the Nasdaq ticker are the two identifiers that can be checked against issuer and exchange records.
• Homepage: reconciling the market figures against independent data will show which values are accurate.
• Homepage: the "official certificate" wording is the specific claim the issuers can confirm or deny.

Summary Verdict

The site is assessed as carrying elevated risk. Its external reputation signals are adverse, its claims contradict its own disclaimers and data, and the evidence does not independently connect it to the organizations it invokes. Its brief operating history and the absence of any corroborating regulated or brand-level link leave nothing to offset those concerns. The site is not presented as trustworthy for any sensitive interaction.

Infrastructure Integrity

The site is served through a mainstream CDN and WAF, and all observed addresses are edge nodes, so the origin server cannot be seen. A valid transport-encryption certificate is in place. These are mitigating factors only. They show competent hosting hygiene, not legitimacy, and they cannot offset the adverse reputation findings. Edge-only visibility also makes independent hosting verification impossible and can mask rapid content changes.

Closing Assessment

The site should be treated as read-only reference material at most. No wallet connection, credential entry, purchase, conversion or other financial action should be taken through it. Anyone interested in the token should go directly to the issuer's or exchange's own official channels.