solairdrops-jr[.]netlify[.]app

This domain is flagged as a high-risk crypto drainer and remains active as of August 01, 2026. The domain, solairdrops-jr.netlify.app, is hosted on Netlify infrastructure and resolves to IP address 63.176.8.218. It has been blocklisted by three security vendors, including PhishDestroy, MetaMask, and SEAL, indicating a coordinated recognition of malicious intent. VirusTotal scanned this domain with 91 vendors, but currently zero flag it; this absence of detections does not confirm safety, as the domain is already on multiple blocklists and classified as a crypto drainer threat type.

The nameserver information is not found, which is consistent with a rapidly deployed or disposable infrastructure typical of phishing campaigns. Defenders should treat this domain as malicious and block all access at the network and email gateway levels. Users who encounter this domain, particularly those involved in cryptocurrency activities, should avoid interacting with it, as crypto drainers are designed to steal wallet credentials or initiate unauthorized transactions. Since the exact page content has not been analyzed, the specific lure or interface is unknown, but the threat classification indicates a focused attack on cryptocurrency assets.

Security teams should monitor for any variations of this domain, as threat actors often rotate similar domains to evade blocks. The hosting on Netlify, a legitimate service, allows the domain to blend with normal traffic, increasing the risk of user exposure. It is recommended to update blocklists immediately, conduct user awareness training on crypto-related phishing, and verify any transactions from wallets that may have visited this domain. The domain's active status suggests ongoing campaign operations, so continuous monitoring of related infrastructure, including the IP address and Netlify subdomains, is advised.