sonicswap[.]org

Sonicswap.org is a malicious domain designed to steal cryptocurrency via a fake swap interface. It poses as a legitimate decentralized exchange but is actually a crypto drainer that prompts users to connect their wallets and approve malicious transactions. Once approved, attackers can siphon funds from the victim's wallet. This threat falls under the broader category of generic phishing, specifically tailored for crypto asset theft.

This domain was flagged by 4 out of 95 security vendors on VirusTotal, indicating a moderate but confirmed risk. The domain registration details show it was created recently, and the registrar information suggests it was set up specifically for this campaign. The unique seed 4ec7fa helps track this variant. PhishDestroy correlates these indicators with known phishing patterns to warn users effectively.

If you have visited Sonicswap.org and connected your wallet, immediately revoke all approvals for that site using a token approval checker or by using a hardware wallet with limited permissions. If you entered any seed phrases or private keys, assume they are compromised and transfer remaining funds to a new wallet. Monitor your accounts for unauthorized transactions and report the domain to relevant authorities and security platforms.