eth[.]sonic-game[.]live

eth.sonic-game.live is a subdomain of sonic-game.live. PhishDestroy first observed the hostname on Feb 26, 2026. Stored content metadata identifies Across as the apparent target. The captured page title is “Claim Your Share of the Arbitrum Ecosystem | Up to $25,000 for Active Wallets”. Page analysis recorded additional brand references to Arbitrum and Ethereum. Stored page analysis classifies the content as fake airdrop. Current evidence score: 74/100 (critical).

One source contains a positive finding: VirusTotal. VirusTotal recorded 8 detections among 93 engines: alphaMountain.ai, BitDefender, CyRadar, Fortinet, G-Data, Google Safebrowsing, Lionic, Sophos on Feb 23, 2026 at 12:17 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 10:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:21 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:14 UTC; content was unavailable. The recorded creation date for the registrable domain sonic-game.live is Feb 21, 2026. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 45.9.148.51 on AS49447 (NICEIT Nice IT Services Group Inc., DM). The recorded endpoint location is Dronten, NL. The stored server header is nginx/1.18.0 (Ubuntu). DOM analysis on Mar 24, 2026 at 01:21 UTC returned 30/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists R11 as the certificate issuer.

Stored content provides classification context, but only one source contains a positive finding.