eth[.]sonic-game[.]live

The domain eth.sonic-game.live was registered on February 21, 2026 and is presently taken offline. Infrastructure analysis shows the hostname resolves to the IPv4 address 45.9.148.51, which is advertised as belonging to Nice IT Services Group Inc. under AS49447 and geolocated to the Netherlands. The site presented the page title “Claim Your Share of the Arbitrum Ecosystem | Up to $25,000 for Active Wallets,” indicating a fake‑airdrop lure targeting cryptocurrency users. The domain appears on a single security blocklist and has been listed by PhishDestroy as a malicious entry.

Reputation scoring from Gridinsoft assigns a trust rating of 0 out of 100, reflecting an extremely low confidence level. VirusTotal scans report that eight of ninety‑three antivirus or URL‑reputation engines flagged the domain as malicious, corroborating the blocklist findings. The TLS certificate is identified as R11, a low‑grade rating that further suggests a lack of legitimate cryptographic stewardship.

No additional evidence such as Safe Browsing or OTX identifiers is supplied. Given the elevated risk classification and the confirmed use of a brand‑impersonation airdrop narrative, defenders should immediately block the IP address 45.9.148.51 at the network perimeter, add eth.sonic-game.live to internal URL filtering and DNS sinkhole lists, and monitor for newly registered domains that share the “sonic‑game.live” suffix or that resolve to the same hosting provider. Continuous re‑evaluation is advised in case the domain is re‑activated or similar infrastructure reappears, and any detection of traffic matching the page title or the described airdrop incentive should be treated as a high‑confidence indicator of phishing activity.