--- title: "Is claim-soniclabs.com a Scam? Trust Score 0/100" source: TrustSniffer type: Website trust & fraud report subject: "claim-soniclabs.com" verdict: "Critical Risk" title: "Is claim-soniclabs.com a Scam? Risk Report, Score 0/100" trust_score: 0 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/claim-soniclabs.com assessed: 2026-10-19 --- # Is claim-soniclabs.com a scam? TrustSniffer's high-risk assessment: 0/100 ## Verdict **Verdict: Critical Risk, trust score 0/100.** claim-soniclabs.com shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-19 by automated analysis. Classification confidence 75%. | Field | Value | | --- | --- | | What this site appears to be | Official-looking Sonic Labs airdrop landing page for the S token. It invites users to connect a wallet, earn points through app-building and free mini-games, and read whitepaper and legal documents. The points-based model promises no direct financial return. Legal identity and contact details are not visible in the extracted text. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 1 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 1 report; shared hosting inflates reports) | Clear | | Domain age | 2.1 years old (Registered history) | Clear | | Web archive | Archived since 2024 (12 snapshots) | Clear | | Certificate | Encrypted connection (Issued by YE2) | Noted | ## The page as captured ![Screenshot of the claim-soniclabs.com homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/claim-soniclabs.com/screenshots/first.png) _What claim-soniclabs.com served when TrustSniffer captured it on 2026-10-19. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: 1 to 3 years (registration continuity). - Public web-archive history exists since 2024. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. The website at claim-soniclabs.com presents itself as an official-looking "Sonic Airdrop" landing page for the S token, branded "Join the S Revolution" and labelled Season 2. It invites visitors to connect a crypto wallet, and it describes a points-based airdrop earned through an app-building programme and a free mini-game arcade. Its apparent purpose is to distribute future S token rewards, with funding programmes, an Innovator Fund and fee monetisation described as the ecosystem model. ### Scam/Impersonation Risk The assessment is clearly cautionary because a **confirmed blacklist listing** exists for this domain. At least one external threat-intelligence source flags it as malicious, and two further sources mark it as suspicious. The archive history for the domain also carries a prior phishing-known marker. The listing is decisive for sensitive actions, and no protective control on the site offsets it. The page does not trigger a formal brand-impersonation finding and shows no conflicting legal identities. However, the domain pairs a "claim" prefix with the Sonic Labs name, and the page uses Sonic Labs branding, a copyright line and legal-document links to look official. Nothing independently connects the domain to the real project. On the homepage, both advertised phases, Sonic Boom and Sonic Arcade, are marked closed. The page still presents a prominent wallet-connect button and a transaction-approval prompt, and it shows headline counters (about 4.1 million and 190.5 million) and a live S price of roughly four cents. These are unverifiable figures, and they work as credibility props. A page that asks for a wallet connection when no active earning phase exists fits the pattern of a "claim" lure. Wallet connection is the usual first step of a wallet-drainer flow. In the sandbox the page loaded 111 third-party background requests and made 7 external form submissions, 3 of them to destinations outside the site's expected set. This level of third-party traffic is unusual for a static campaign page. One abuse report against the hosting IP address is discounted, because it applies to shared provider infrastructure and carries no confidence weight. It does not drive this assessment. Evidence: - Homepage: the page lists Phase 01 (Sonic Boom) and Phase 02 (Sonic Arcade: Plinko, Mines, Wheel) as closed, yet still shows "Connect Wallet" and "Accept transaction request in the wallet". - Homepage: it displays unverifiable headline counters and a live S token price, alongside a "© 2025 Sonic Labs" footer. - Sandbox behaviour: 111 external background requests, 7 external form submissions (3 to non-whitelisted destinations) and a maximum external request share of about 81%. - Domain history: the archive's prior phishing-known marker and the external blacklist hit were both recorded against this domain. ### Regulatory Verification Notes The site links a MiCA whitepaper, Terms of Service and Privacy Policy, which suggests a regulated token-disclosure framework. No legal entity name, registered address, licence, registration number or audit detail is visible on the page, so these documents cannot be tied to a verifiable operator. **Ownership opacity** applies: registration details are hidden or incomplete, so the real operator cannot be identified. This is not an identity contradiction. The page offers no regulatory standing that could be checked, and the broker-reputation dataset has no record of the domain. Independent identity verification is therefore unestablished, and the on-page legal links should not be read as evidence of authorisation. Evidence: - Domain registration: registered 2026-09-24 (about 25 days old) through NICENIC International Group Co., Limited, with expiry 2027-09-24. - Web archive: 12 snapshots spanning 2024–2025 (2 years tracked), which predate the current registration record. - Hosting: served from AS14956 (RouterHosting LLC, US). - Transport encryption: a DV certificate issued by YE2, valid to 2026-12-23. This confirms encryption only, not operator identity. ### What to Verify Next Any engagement should begin outside this domain. The first step is to open the official Sonic Labs channels through a manually typed address or a bookmark that predates this assessment, and check whether an airdrop claim page exists there. The second step is to compare this site's token claims, the S price and the whitepaper links against the project's official documentation. The third step is to confirm the official support and contact channels through an independent route. Evidence: - Homepage links: the Whitepaper, MiCA Whitepaper, Docs, Blog and Media Kit entries should be compared with the official project's own listings. - Page text: the extracted content gives no contact channel, so any contact route must come from the official project. - Campaign status: both phases are shown as closed, which should be checked against official Season 2 announcements. ### Summary Verdict Available evidence places this website in a high-risk posture. A confirmed external blacklist listing, together with a Sonic-branded wallet-connect page that has no verifiable operator and no active campaign, outweighs its otherwise tidy presentation and valid encryption. Legitimacy is not established, and the site should be treated as a probable lure for wallet-related interactions. ### Infrastructure Integrity The site sits behind a mainstream CDN and WAF, and its resolved address appears to be a CDN edge address rather than an origin server. This is a mitigating factor only, because it shields the origin from direct exposure but says nothing about the operator's legitimacy. Edge-only visibility also prevents independent verification of the true hosting origin and can mask rapid content changes. Two unconfirmed heuristics, a young domain with a low footprint and sparse subdomains, add mild context but are not treated as confirmed risks. ### Closing Assessment Do not connect a wallet, approve any transaction or signature request, or enter credentials or payment details on this site, and do not interact with it beyond passive reading. Anyone who has already connected a wallet here should review and revoke token approvals promptly. Claims should be pursued only through the project's officially published channels. _Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 4 findings contributed to this verdict, raised by external reputation, hosting and network, page content, behaviour in a sandbox. ### 01 External reputation - Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`) ### 02 Hosting and network - The hosting and network setup shows a moderate level of risk indicators. (Hosting and network `rule:DNS_RISK_MED`) - The domain is young and has almost nothing else set up around it. (Hosting and network `rule:DNS_SPARSE_YOUNG_DOMAIN`) - The domain is young and has a very small footprint on the network. (Hosting and network `rule:DNS_LOW_FOOTPRINT_YOUNG_DOMAIN`) ### 03 Page content - The browser raised a warning while loading the page. (Page content `rule:PAGE_BROWSER_FLAGS_SUSPICIOUS`) ### 04 Behaviour in a sandbox - Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`) ### Signals weighed against the site - AbuseIPDB: 1 report on hosting IP 172.86.114.109 (RouterHosting LLC, Data Center/Web Hosting/Transit), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of claim-soniclabs.com. - The request stayed on claim-soniclabs.com. It was not redirected to another domain. (Clear) - Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. (Clear) - DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted) - The registration is paid up to 2027-09-24. (Noted) - The earliest public archive of this site is from 2024-09-11. (Clear) - It is hosted on ROUTERHOSTING, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED | | Hosting | ROUTERHOSTING - RouterHosting LLC, US | | Country | US | | Server IP | 172.86.114.109 | | Name servers | BETHANY.NS.CLOUDFLARE.COM, CASEY.NS.CLOUDFLARE.COM | | CDN / edge network | Detected (cloudflare) | | Resolved IP addresses | 1 | | Edge IP addresses | 1 | | Likely origin IP addresses | 0 | | SSL issuer | YE2 | | SSL expiry | 2026-12-23 | | Domain age | 2.10 years (continuous registration) | | Domain expiry | 2027-09-24 | | Archive first seen | 2024-09-11 | | Archive snapshots | 12 | | Reputation | VirusTotal: 1 flagged \| AbuseIPDB: 0% confidence, 1 report \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about claim-soniclabs.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [winance-exchange.com](https://trustsniffer.com/report/winance-exchange.com), also hosted by ROUTERHOSTING (Critical Risk, 0/100) - [reward-ondo.app](https://trustsniffer.com/report/reward-ondo.app), also hosted by ROUTERHOSTING (Critical Risk, 0/100) - [reward-symbiosis.app](https://trustsniffer.com/report/reward-symbiosis.app), also hosted by ROUTERHOSTING (Critical Risk, 0/100) - [claim-cashcat.app](https://trustsniffer.com/report/claim-cashcat.app), also hosted by ROUTERHOSTING (Critical Risk, 0/100) - [claim-aethir.app](https://trustsniffer.com/report/claim-aethir.app), also hosted by ROUTERHOSTING (Critical Risk, 0/100) - [curve-claims.trade](https://trustsniffer.com/report/curve-claims.trade), also hosted by ROUTERHOSTING (Critical Risk, 0/100) - [pressuresolana.com](https://trustsniffer.com/report/pressuresolana.com), another .com site assessed as critical-risk (Critical Risk, 11/100) - [u-s-d-t-bep-2-0.onrender.com](https://trustsniffer.com/report/u-s-d-t-bep-2-0.onrender.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [dogeversestaking.pages.dev](https://trustsniffer.com/report/dogeversestaking.pages.dev), another site assessed as critical-risk (Critical Risk, 5/100) - [xdnaprotocol.com](https://trustsniffer.com/report/xdnaprotocol.com), another .com site assessed as critical-risk (Critical Risk, 3/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen) - [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance) - [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens) --- *Source: [TrustSniffer](https://trustsniffer.com/report/claim-soniclabs.com) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/claim-soniclabs.com · assessed 2026-10-19.*