soneium[.]blogspot[.]com

The domain soneium.blogspot.com is a confirmed phishing site engaged in brand impersonation targeting Ethereum users. It presented itself as a cryptocurrency-related platform under the name 'Soneium' but was designed to deceive victims through social engineering tactics. No drainer kit was identified, though the site was actively used for cryptocurrency scams. As of the latest verification, soneium.blogspot.com has been taken offline.

Technical analysis shows soneium.blogspot.com was flagged by 13 of 95 security vendors on VirusTotal, including ChainPatrol, alphaMountain.ai, and BitDefender. Google Safe Browsing classified it as 'SOCIAL_ENGINEERING' under phishing threats, and it appeared on one security blocklist (PhishDestroy). The domain was registered through Google Blogger and resolved to the IP address 142.251.111.132, hosted by Google LLC in the US. The SSL certificate was issued by Google Trust Services / WE2, and the observed page title was 'Soneium'. Technologies detected on the site included Blogger, Java, Python, OpenGSE, Clipboard.js, and HTTP/3. Gridinsoft assigned it a trust score of 0/100.

Individuals who interacted with soneium.blogspot.com should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the domain to Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts and prevent further victimization.