Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
gstockbnb.com shows high-risk / scam indicators.
| What this site appears to be | A BNB Smart Chain token landing page for $GSTOCK. It promotes holding and staking for holder rewards, links to a PancakeSwap market and BscScan contract, and makes staking and reward-eligibility calls to action without disclosing reward sources, audits, or a legal entity. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 15 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20267 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
GSTOCK is a single-page token landing site for a BNB Smart Chain token, $GSTOCK. Its tagline is "Built for the market." It shows live PancakeSwap price, volume and liquidity figures, a contract address with a BscScan link, and a "dedicated staking experience" for holders. It tells visitors that "rewards are currently distributed to registered holders based on their share," and it offers "Stake $GSTOCK" and "Check Rewards Eligibility" actions. The apparent business model is promoting a community token whose value depends on market liquidity, with staking rewards as the incentive to buy and hold.
Scam/Impersonation Risk
No contradictions were observed. The site shows no confirmed threat-list entry, no brand impersonation, no conflicting legal identities and no phishing mechanics. It has no login form, no hidden forms and no wallet-drainer behaviour. Even so, the risk assessment is elevated, and several signals converge on that. One established security vendor currently flags the domain, which is treated here as a soft reputational signal and not a confirmed listing. The domain was registered only days before analysis, and its web history begins days later. The homepage promises holder rewards and staking yields but discloses no reward source, rate, audit, team or legal entity, and the "Session 001" and "the book" wording is marketing language with nothing behind it. The page's own advice to "verify the contract" only confirms that a contract exists. It does not show that the staking rewards are real or sustainable. Browser testing also recorded external data submissions to destinations outside the site's expected set, along with a clipboard write, so the site's staking or "eligibility" flows warrant particular scrutiny.
- Homepage: the staking and reward-eligibility calls to action, and the statement that rewards go to "registered holders based on their share", come with no stated reward source, rate, audit or operator.
- Domain provenance: registered 2026-10-05 (~0.04 years old, about two weeks).
- Web archive: 7 snapshots spanning 2026-10-06 to 2026-10-13 (1 year tracked), so no prior history exists.
- Browser behaviour across 3 runs: 3 external POST requests to non-whitelisted destinations and a clipboard write detected. No wallet-connect, drainer or cloaking behaviour was observed.
Regulatory Verification Notes
The site has no terms, privacy, about or legal pages. The homepage names no operating company, jurisdiction, license, registration number, physical address or contact channel. It positions itself as a "community asset" with no accountable party. For a site that invites staking and reward claims, this is a significant disclosure gap that leaves no one to hold responsible if rewards fail to materialise. The gap is a verification shortfall in its own right and is not proof of fraud. The site is not matched in the broker-reputation dataset consulted, so no third-party regulatory or reputational record exists to offset it. The domain's registration details are incomplete, which is consistent with the absence of any identified operator. Identity remains unverified, and nothing on the site supports treating the operator as a known, accountable entity.
- Homepage: no legal entity, license, registration number or address is stated, and no terms or privacy page is linked.
- Registration: the domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, created 2026-10-05 and expiring 2027-10-05.
- Hosting and encryption: served from AS13335 (Cloudflare, Inc., US); the TLS certificate is domain-validated only (DV), issued by YE1, valid to 2027-01-03. Domain-level validation confirms no organisational identity.
What to Verify Next
Verification should start with the token itself. The contract on the BNB Smart Chain explorer should be reviewed independently for ownership and mint privileges, for whether liquidity is locked and who holds the largest balances, and for whether the staking contract is separate, audited and upgradeable. The reward mechanics matter most. Any claimed reward rate should be traced to an actual funding source instead of being accepted on the strength of the page's estimates. The official X account should be cross-checked through independent channels for age, history and genuine community activity, and the contract address should be compared with the one published there. Any named team or operator should be confirmed through an independent route, and the official support channels should be confirmed before any interaction.
- Homepage: the contract address and the BscScan and DexScreener links are the only checkable artifacts, and they can be inspected without interacting with the site.
- Homepage: the PancakeSwap market shows modest liquidity, which limits how easily holders can exit larger positions.
- Social presence: the only external presence is a single X account link, with no other channels.
Summary Verdict
The site presents an elevated risk posture. It is a very new, anonymous token promotion whose central incentive, staking rewards, rests on unsupported claims. Convergent signals from page content, domain history and an external security flag outweigh the technically sound site delivery. Legitimacy cannot be inferred from the available evidence, and the operator's identity is unverified.
Infrastructure Integrity
The site is delivered through Cloudflare's CDN and WAF. All observed addresses are CDN edge servers, and the origin server is not visible, so the actual hosting cannot be independently checked. Content could also be swapped quickly behind the edge without any visible change in hosting. The site's transport encryption is valid, and the sparse subdomain footprint fits a very young domain. These protections mitigate generic exposure but do not offset the reputational and disclosure concerns above.
Closing Assessment
Prospective users should treat the site as an unvetted token promotion. Wallet connections, token purchases and staking deposits should wait until the contract, reward funding and operator have been independently confirmed. Any amount committed in the meantime should be limited to what could be lost entirely.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, hosting and network.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 60% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of gstockbnb.com.
- The request stayed on gstockbnb.com. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-05. Noted
- The earliest public archive of this site is from 2026-10-06. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3030::6815:81d |
| Name servers | ETIENNE.NS.CLOUDFLARE.COM, NELLY.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE1 |
| SSL expiry | 2027-01-03 |
| Domain age | 0.04 years (continuous registration) |
| Domain expiry | 2027-10-05 |
| Archive first seen | 2026-10-06 |
| Archive snapshots | 7 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about gstockbnb.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.