soniclabs[.]my

Analysis indicates that the domain soniclabs.my was registered on December 18, 2025 and is currently offline. The site resolved to IP address 92.113.16.136, which is hosted in Germany and belongs to AS47583 Hostinger International Limited. Registration was performed through Hostinger operations, UAB, and the domain relies on generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. No SSL certificate was presented, leaving the HTTP service unencrypted.

The page title observed during the brief activity period was "Sonic Labs Enters Stronger Phase Under New CEO Mitchell Demeter," suggesting an attempt to impersonate the Sonic Labs brand, consistent with the classified scam type of brand impersonation. Security telemetry shows the domain appears on a single blocklist (PhishDestroy) and has a Gridinsoft trust score of 0 out of 100, reflecting a severely low reputation. AlienVault OTX references the domain in three separate threat intelligence pulses, providing additional corroboration of malicious use. VirusTotal scans reported nine detections out of ninety‑five scanning engines, indicating that multiple security products have flagged the domain as malicious.

Uncertainty remains regarding the specific payload or credential‑stealing mechanisms employed, as no further page content or login forms have been captured. Defenders should ensure that the IP address 92.113.16.136 is blocked at network perimeters, add soniclabs.my to internal URL filtering and domain blocklists, and monitor the registrar and hosting provider for any re‑registration attempts. Continuous threat‑intel feeds should be consulted for emerging pulses related to this domain, and any outbound traffic to the identified IP should be inspected for anomalous activity.