Is saturnreward.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as an official "Pre-Trial Claims Portal" for the State of New York, branded as an official notice delivery service. It says it delivers pre-trial claim notices on behalf of a rights holder, and the only claimant it names is Sony Music Entertainment. It tells visitors that notices cannot be searched or listed and are reachable only through private links sent to named respondents. It then sets a fixed response window before a matter is "referred for court processing". Its apparent purpose is to steer recipients into a private-link and account-based appeal workflow, with no stated fee or revenue model.

Scam/Impersonation Risk

Confirmed contradictory signals are present, and the page content matches the structure of a legal-threat lure. The homepage invokes court referral and a fixed response deadline to create urgency. It also says respondents must appeal through an account, while claiming the portal never asks for passwords, codes or payment details. The access instructions contradict each other and are partly garbled. The page gives no case number, court, named legal entity for the claimant, or working correspondence address. The business-model analysis concludes that this pattern can be used to harvest identity or account data, or to extract settlement payments under legal pressure. Independent reputation sources have also flagged the domain as malicious, and it is blacklisted. Naming Sony Music Entertainment as claimant lends borrowed authority, but nothing on the site evidences any real connection to that company or to any New York court. No brand-impersonation match was found, but the claimed legal standing is unsubstantiated. The domain was registered only weeks before analysis, and the credibility of the notice rests entirely on assertions the page cannot back up. Evidence:

• Homepage: official-notice styling, a fixed response window and a court-referral threat, with contradictory and garbled access instructions.
• Homepage: it states that no password or code is ever requested, yet requires an account-based appeal. It names no case, court or claimant legal identity.
• Domain registered 2026-09-26 (~25 days old, 0.07 years) through NICENIC INTERNATIONAL GROUP CO., LIMITED.
• Reputation sources: six malicious detections, including two tier-one security vendors, and an external blacklist hit.

Regulatory Verification Notes

The site claims quasi-judicial authority but discloses no licence, court registration, attorney of record or operating entity. For a service that asks people to respond to legal claims, this absence is material. No third-party broker or regulator record matches the site, so it has no independent standing as a regulated or recognised legal-service provider. On-page identity claims are not evidence of real-world identity. The legal-status and contact-address red flags raised by the page analysis are consistent with a site that has no governance footprint to inspect. Web-archive history shows a newly created property, not an established one, with no continuity that could support the claimed authority. Evidence:

• Homepage: no legal entity, court docket, attorney or physical address is published, and no licence is claimed.
• Web archive: 2 snapshots spanning 2026 (about 1 year tracked), both captured on the day of registration.
• Served from AS13335 (Cloudflare, Inc.), US, which says nothing about the operator's identity.
• TLS certificate issued by YE1 (DV), valid to 2026-12-25. Domain-validation only, so it establishes no organisational identity.

What to Verify Next

A recipient of any message pointing to this site should first treat it as unverified. Any claimed New York pre-trial matter should be checked directly with the relevant court clerk, using contact details found independently of this site. The named rights holder's legal or anti-piracy department should be asked through its own published channels whether it issued any such notice. The delivery message itself should be examined in a secure environment without opening the private link, noting the sender domain and any urgency or payment language. Where an organisation holds employee or customer data, its security team should be alerted so that related lookalike notices can be blocked. Evidence:

• Homepage: the claimed process depends on private links delivered by message, so the original message is the key artifact.
• Homepage: no case reference or court is named, so there is nothing on-site to check against a registry.
• Reputation sources: independent detections mean the domain should be blocked at the mail and web gateway while verification proceeds.

Summary Verdict

The assessment is critical. Strong external threat detections, a very new domain, and a page that mimics an official legal-notice process without any verifiable authority converge on a high-risk posture. The site's technical hygiene and page-rendering behaviour do not offset these findings.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all observed addresses are edge servers. No origin server was observable. The transport certificate is valid. This is a mitigating factor only, because the protection is generic and available to any customer. It also limits independent hosting verification and can mask rapid content swaps. It cannot offset the external threat detections.

Closing Assessment

The site should not be used for anything beyond passive viewing. No private link should be opened or account created, no credentials, identity documents or payment details submitted, and no settlement or "appeal" fee paid in response to its demands. The domain should be blocked and reported to the relevant abuse and phishing-reporting channels.