Is saturn-rewards.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a single-page "Pre-Trial Claims Portal" presented as an official notice-delivery service for the State of New York. It says it delivers pre-trial copyright claim notices on behalf of a rights holder, naming Sony Music Entertainment. Recipients are told to open a private link from a notification message and to file an appeal through an account. It presents itself as fee-free, but it names no court, law firm, or working contact channel. Its appeal instructions break off mid-sentence, so the way value or personal data would flow is undefined.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several major security vendors currently flag the domain as malicious, and it also appears on an external blacklist. The page's own content matches the pattern of a coercive legal-threat lure. It invokes a named, well-known rights holder, but the claimant line is garbled ("Sony Music Entertainment *LCC") and the correspondence address is blank. It cites no case number, court, or representative. It steers recipients to a private link and an account-based appeal, which is the sensitive action. The appeal instruction is truncated ("you must use the account to which…"), and the surrounding text is contradictory. The page also states that it never asks for passwords, codes, or payment details, yet it routes recipients into an undefined account flow. That dissonance between reassurance and requested action is typical of credential-harvesting and pressure-based schemes. The domain also carries a rewards-style name, which does not match its legal-notice content, and this reinforces the doubt about its purpose. No direct brand-impersonation match was confirmed, but the site's claim to act for a named company is unsupported by any evidence. This is a high-risk posture, not a neutral unknown. Evidence:

• Homepage: presents itself as an official pre-trial notice service for New York, with no court, firm, or case reference.
• Homepage: the claimant is given as "Sony Music Entertainment *LCC" with a blank correspondence address.
• Homepage: the appeal instructions end mid-sentence ("you must use the account to which." and "use the a"), and the notice-access text is garbled.
• Domain provenance: registered 2026-09-26 (~25 days old, 0.07 years), so the domain has no operating history that could back the legal-authority claim.

Regulatory Verification Notes

The site names no licensed legal entity, law firm, registered address, bar or court reference, or regulator. This is a disclosure gap on a page that claims judicial or quasi-judicial authority, and it is material because the stakes are high. The site's identity is unverified, and ownership is opaque, with no operator named anywhere on the page. The blacklist listing and the multi-vendor detections are external reputational signals. They are not a legal or regulatory finding, but here they align with the page-level evidence. No regulatory, licensing, or broker-registry match was found. Evidence:

• Homepage: no company name, jurisdictional registration, or legal contact is published for the party issuing the notices.
• Registrar of record is NICENIC INTERNATIONAL GROUP CO., LIMITED; the registration runs to 2027-09-26.
• Hosted on AS13335 (Cloudflare, Inc., US); the TLS certificate is issued by YE1 at domain-validation (DV) level and valid to 2026-12-25 (64 days remaining). DV encryption confirms only domain control, not the operator's identity.
• Homepage and sandbox runs: no forms, no login fields, and no external network calls were observed, so the on-page exposure is limited to the private link and account flow described in the text.

What to Verify Next

A recipient of any message pointing to this portal should treat it as unverified and not follow its private link. The claim should be checked independently with the named rights holder, using a contact route found outside the message. Any court reference should be checked with the clerk of the relevant court, not through the portal. The sender's address and message headers should be preserved and reported to the rights holder's anti-piracy or legal department. Any account created or credential entered after visiting the site should be treated as exposed, and the affected passwords should be changed. Evidence:

• Homepage: the notice states each notice is reachable only through a private link in a notification message, so the link itself cannot be validated from the site.
• Homepage: no claim number, attorney of record, or court is given, so independent confirmation has nothing to match against.
• Homepage: the stated response window and referral to "court processing" create time pressure with no checkable basis.

Summary Verdict

The overall posture is high risk. Independent threat detections, an external blacklist listing, and a page that demands a sensitive action while offering no proof all point the same way. The domain's very recent creation adds to this. The legal-authority claim is unsupported by any corroborating evidence.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a CDN edge node, so the origin host is not visible. This is a normal, protective setup and a modest mitigating factor. It does not offset the threat detections, and edge-only visibility also limits independent verification of the hosting and would let content be swapped quickly.

Closing Assessment

Treat the site as unsafe for any interaction beyond passive viewing. Do not open its private links, sign in, create an account, or provide credentials, personal data, or payments. Any related message should be reported and handled through channels the rights holder publishes itself.