thesoniclabs[.]pages[.]dev

The domain thesoniclabs.pages.dev has been identified as a brand impersonation threat targeting Coinbase, currently active and posing a high risk to users. This site masquerades as a legitimate blockchain platform called Sonic, but its true purpose is to drain cryptocurrency wallets through fake login credentials or wallet connections.

Security analysis reveals that the domain was registered on May 16, 2025, through Cloudflare, Inc., and resolves to IP address 172.66.44.119. VirusTotal data shows that 3 out of 95 security vendors flag this domain as malicious, and it appears on 2 security blocklists. The SSL certificate is issued by Google Trust Services (WE1), which provides a false sense of security. The page title reads 'Sonic | The Fastest EVM Layer-1 Blockchain,' but this is a decoy to lure victims into believing they are interacting with a legitimate crypto project.

Given its active status and high-risk classification, users should avoid any interaction with thesoniclabs.pages.dev. PhishDestroy strongly recommends verifying any URL claiming to be associated with Coinbase or Sonic through official channels. Do not enter personal information, connect wallets, or download files from this domain. Report the site to security authorities and warn others to prevent financial losses.