sonelum[.]app

The domain sonelum.app is a phishing site engaged in brand impersonation targeting Discord users. It presents itself as a legitimate platform offering on-chain rewards under the guise of 'Soneium Score,' but its primary objective is to harvest user credentials through social media-themed scams. No crypto drainer kit was identified. As of the latest verification, sonelum.app has been taken offline.

Technical indicators confirm elevated risk. The domain was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and Seclookup, and appears on 5 security blocklists such as PhishDestroy, ScamSniffer, and Polkadot. The domain was created on February 21, 2026, and resolves to the IP address 172.67.157.245, hosted on Cloudflare's infrastructure (AS13335) in the US. The SSL certificate is issued by WE1, and the observed page title reads 'Soneium Score - Earn Badges &Boost Your On-Chain Score.' Gridinsoft assigned a trust score of 0/100, while Scamadviser rated it 36/100. Registrar information is not available.

Users who interacted with sonelum.app should immediately change their Discord passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for signs of fraud, such as unauthorized messages or transactions. Report the domain to Discord's official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.