claim-sosovalue.com
Categoria: Phishing
Para usar o produto com todas as funcionalidades, tem de adquirir uma licença do Combo Cleaner. Está disponível um teste gratuito limitado de sete dias. O Combo Cleaner é propriedade e operado pela RCS LT, a empresa-mãe do PCRisk.com.
Descrição de claim-sosovalue.com
claim-sosovalue.com appears to present itself as a promotional or claim portal مرتبط with the SoSoValue brand, using page text such as "SoSoValue Exp Ads" and "$SOSO EXP Airdrop S2 Claim is now live." The visible content promotes a crypto-themed allocation or airdrop claim flow and includes wallet-connection prompts, references to ETH and SOL, and links pointing to sosovalue.com, ads.sosovalue.com, and a related social profile. Based on the page title, metadata, and screenshot, the site appears to target users interested in cryptocurrency campaigns, token claims, or growth-marketing promotions.
At the same time, the domain itself is separate from the apparent main brand domain and uses a prefixed naming pattern, which can be associated with campaign microsites or unofficial look-alike pages. The operator is not clearly identified in the provided scan data, and the domain is very new. Based on the available content, this appears to be a crypto-related landing page centered on an airdrop or rewards claim experience rather than a broad informational website.
Avaliação de segurança de claim-sosovalue.com
Several risk indicators were present at the time of this scan. The domain was flagged by 6 out of 91 security engines, with multiple classifications pointing to phishing or fraud-related activity. In addition, the page strongly resembles SoSoValue branding while operating from a separate domain, and the domain name closely mirrors that brand in a way that may indicate a look-alike website. The screenshot also shows common high-pressure crypto-claim language such as limited-time messaging, wallet connection prompts, and token claim calls to action, which can increase risk in impersonation or credential-harvesting scenarios.
Some checks were less concerning: the malware scan did not identify flagged files, major threat-database checks shown here were clean, and no external links or iframes were flagged by the page scan. However, those signals are outweighed by the combination of multi-engine phishing detections, the extremely recent registration age of 3 days, lack of established traffic presence, and the apparent resemblance to a known crypto brand on a non-primary domain.
Based on these findings, this website may pose potential risks to visitors.
Descrição técnica
The site was using a valid TLS certificate at the time of the scan, issued through a mainstream certificate provider, and was served behind Cloudflare infrastructure on IP address 104.21.43.245. Nameservers also point to Cloudflare, suggesting the domain uses that provider for DNS and edge delivery. DNSSEC was not enabled, which is not uncommon but does mean DNS responses do not appear to have that additional integrity protection.
From a technical-risk perspective, the most notable concerns are not the certificate or hosting stack but the domain context: it is newly registered, unranked, and uses a brand-resembling naming pattern. The scan also shows a PHP endpoint and shortened outbound links, which are not inherently malicious but can reduce transparency during user redirection or claim flows.
Partilhe a sua experiência com este website. Era seguro? Encontrou algum problema?