Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
claim-soniclabs.com shows high-risk / scam indicators.
| What this site appears to be | Official-looking Sonic Labs airdrop landing page for the S token. It invites users to connect a wallet, earn points through app-building and free mini-games, and read whitepaper and legal documents. The points-based model promises no direct financial return. Legal identity and contact details are not visible in the extracted text. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 1 report; shared hosting inflates reports | Clear |
| Domain age | 2.1 years oldRegistered history | Clear |
| Web archive | Archived since 202412 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website at claim-soniclabs.com presents itself as an official-looking "Sonic Airdrop" landing page for the S token, branded "Join the S Revolution" and labelled Season 2. It invites visitors to connect a crypto wallet, and it describes a points-based airdrop earned through an app-building programme and a free mini-game arcade. Its apparent purpose is to distribute future S token rewards, with funding programmes, an Innovator Fund and fee monetisation described as the ecosystem model.
Scam/Impersonation Risk
The assessment is clearly cautionary because a confirmed blacklist listing exists for this domain. At least one external threat-intelligence source flags it as malicious, and two further sources mark it as suspicious. The archive history for the domain also carries a prior phishing-known marker. The listing is decisive for sensitive actions, and no protective control on the site offsets it. The page does not trigger a formal brand-impersonation finding and shows no conflicting legal identities. However, the domain pairs a "claim" prefix with the Sonic Labs name, and the page uses Sonic Labs branding, a copyright line and legal-document links to look official. Nothing independently connects the domain to the real project. On the homepage, both advertised phases, Sonic Boom and Sonic Arcade, are marked closed. The page still presents a prominent wallet-connect button and a transaction-approval prompt, and it shows headline counters (about 4.1 million and 190.5 million) and a live S price of roughly four cents. These are unverifiable figures, and they work as credibility props. A page that asks for a wallet connection when no active earning phase exists fits the pattern of a "claim" lure. Wallet connection is the usual first step of a wallet-drainer flow. In the sandbox the page loaded 111 third-party background requests and made 7 external form submissions, 3 of them to destinations outside the site's expected set. This level of third-party traffic is unusual for a static campaign page. One abuse report against the hosting IP address is discounted, because it applies to shared provider infrastructure and carries no confidence weight. It does not drive this assessment.
- Homepage: the page lists Phase 01 (Sonic Boom) and Phase 02 (Sonic Arcade: Plinko, Mines, Wheel) as closed, yet still shows "Connect Wallet" and "Accept transaction request in the wallet".
- Homepage: it displays unverifiable headline counters and a live S token price, alongside a "© 2025 Sonic Labs" footer.
- Sandbox behaviour: 111 external background requests, 7 external form submissions (3 to non-whitelisted destinations) and a maximum external request share of about 81%.
- Domain history: the archive's prior phishing-known marker and the external blacklist hit were both recorded against this domain.
Regulatory Verification Notes
The site links a MiCA whitepaper, Terms of Service and Privacy Policy, which suggests a regulated token-disclosure framework. No legal entity name, registered address, licence, registration number or audit detail is visible on the page, so these documents cannot be tied to a verifiable operator. Ownership opacity applies: registration details are hidden or incomplete, so the real operator cannot be identified. This is not an identity contradiction. The page offers no regulatory standing that could be checked, and the broker-reputation dataset has no record of the domain. Independent identity verification is therefore unestablished, and the on-page legal links should not be read as evidence of authorisation.
- Domain registration: registered 2026-09-24 (about 25 days old) through NICENIC International Group Co., Limited, with expiry 2027-09-24.
- Web archive: 12 snapshots spanning 2024–2025 (2 years tracked), which predate the current registration record.
- Hosting: served from AS14956 (RouterHosting LLC, US).
- Transport encryption: a DV certificate issued by YE2, valid to 2026-12-23. This confirms encryption only, not operator identity.
What to Verify Next
Any engagement should begin outside this domain. The first step is to open the official Sonic Labs channels through a manually typed address or a bookmark that predates this assessment, and check whether an airdrop claim page exists there. The second step is to compare this site's token claims, the S price and the whitepaper links against the project's official documentation. The third step is to confirm the official support and contact channels through an independent route.
- Homepage links: the Whitepaper, MiCA Whitepaper, Docs, Blog and Media Kit entries should be compared with the official project's own listings.
- Page text: the extracted content gives no contact channel, so any contact route must come from the official project.
- Campaign status: both phases are shown as closed, which should be checked against official Season 2 announcements.
Summary Verdict
Available evidence places this website in a high-risk posture. A confirmed external blacklist listing, together with a Sonic-branded wallet-connect page that has no verifiable operator and no active campaign, outweighs its otherwise tidy presentation and valid encryption. Legitimacy is not established, and the site should be treated as a probable lure for wallet-related interactions.
Infrastructure Integrity
The site sits behind a mainstream CDN and WAF, and its resolved address appears to be a CDN edge address rather than an origin server. This is a mitigating factor only, because it shields the origin from direct exposure but says nothing about the operator's legitimacy. Edge-only visibility also prevents independent verification of the true hosting origin and can mask rapid content changes. Two unconfirmed heuristics, a young domain with a low footprint and sparse subdomains, add mild context but are not treated as confirmed risks.
Closing Assessment
Do not connect a wallet, approve any transaction or signature request, or enter credentials or payment details on this site, and do not interact with it beyond passive reading. Anyone who has already connected a wallet here should review and revoke token approvals promptly. Claims should be pursued only through the project's officially published channels.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, hosting and network, page content, behaviour in a sandbox.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Hosting and network
- The hosting and network setup shows a moderate level of risk indicators.Hosting and network
rule:DNS_RISK_MED - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN - The domain is young and has a very small footprint on the network.Hosting and network
rule:DNS_LOW_FOOTPRINT_YOUNG_DOMAIN
03 Page content
- The browser raised a warning while loading the page.Page content
rule:PAGE_BROWSER_FLAGS_SUSPICIOUS
04 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
Signals weighed against the site
- AbuseIPDB: 1 report on hosting IP 172.86.114.109 (RouterHosting LLC, Data Center/Web Hosting/Transit), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of claim-soniclabs.com.
- The request stayed on claim-soniclabs.com. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-24. Noted
- The earliest public archive of this site is from 2024-09-11. Clear
- It is hosted on ROUTERHOSTING, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | ROUTERHOSTING - RouterHosting LLC, US |
| Country | US |
| Server IP | 172.86.114.109 |
| Name servers | BETHANY.NS.CLOUDFLARE.COM, CASEY.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 1 |
| Edge IP addresses | 1 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-23 |
| Domain age | 2.10 years (continuous registration) |
| Domain expiry | 2027-09-24 |
| Archive first seen | 2024-09-11 |
| Archive snapshots | 12 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 1 report | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about claim-soniclabs.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.