ScanMalware.com

Security Scan Report: workwithsonic.online

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/93748274-a77e-4104-aa72-24bcf3a79673Domain and IP registration (RDAP)/api/v1/rdap/93748274-a77e-4104-aa72-24bcf3a79673How often this domain was scanned/api/v1/domain/stats/workwithsonic.onlineScan history for this domain/api/v1/domain/history/workwithsonic.online?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is workwithsonic.online and was registered 2 days ago.

Submitted URL: https://workwithsonic.online/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Counterfeit Sonic careers page matching an analyst-vetted recruitment ClickFix kit: a referral-code gate leads applicants to clipboard-pasted PowerShell that installs the OverLord stealer. Confirmed malicious.

Risk Factors (5)
Known malicious recruitment/ClickFix stealer kit identified on the page
Critical hunting-rule hit for Recruitment_Refcode_ClickFix_Kit (roster-anchored)
High-severity network IDS alert for PowerShell stager traffic
Brand impersonation of the Sonic blockchain project on a non-official domain
Referral/verification-code gate used to advance victims to a clipboard-delivered malware command
Domain age information unavailable

Details

Page Title

Sonic | Careers

Scan Type

public

Domain Name Analysis

The domain name 'workwithsonic.online' uses the modern generic top-level domain (.online). Its registrable label 'workwithsonic' stretches across 13 characters with 4 vowels and nine consonants. It segments into 3 words: work, with, sonic. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

SS) SeRIC q Accept invitation 7 ( Eve DeFi Redefined Sonic is the highest-performing EVM LI, combining speed, incentives, and world-class infrastructure. Join the builders powering S. (\ Accept in...

Page Load Overview

2.19s
Total Load Time
85 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,819 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software63% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
63%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
865.110.40.18United States
AS22295Advin Services LLC
81--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EA22CE3360F1187F40E3D2E66AA16799EED04303CA8A4D40B3BD9B884F96D97DE6711D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:16dCLL2WT2bdIWWzmXH/ZxBPfwn6N35P7o46LB74Mfg4MjYm4cikuFVb0JG68VbZ:1QC/hhHyBHRNdo4aF4L4vm4cv+VRF3R9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10216:IASC4dgYAFIggrNkhAAA4FOAsUMBIlkyJxHAzOlYpgYQOMwHYgIMIQUEBIiUJA6AQIEilAySBUQwJFe0AACoSgJFgQmAAIEn

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:470303b8f8f0e0e0
Perceptual Hash:ed1f32e2d9d86062
Difference Hash:9e0e36333393878e
Wavelet Hash:470703f8f8f8e1e1
Color Hash:30e00000000

Other Hashes

Crop Resistant:9e0e36333393878e

Scan History

Scan history not available

Unable to load historical scan data