solairdrops-sx[.]netlify[.]app

This domain, solairdrops-sx.netlify.app, has been identified as a crypto‑drainer operation. The site is hosted on Netlify and resolves to the IPv4 address 63.176.8.218. Infrastructure analysis shows that the domain was registered through Netlify’s platform, and no authoritative name servers were returned during DNS queries, indicating reliance on Netlify’s default DNS configuration. The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy community feed.

VirusTotal reports that the URL has been scanned by 91 security vendors; while none of those engines have raised a detection at the time of analysis, the absence of detections does not constitute evidence of benign intent. The site remains live as of the report date, July 23 2026, and continues to serve its malicious payload. Defenders should treat the domain as hostile.

Recommended mitigations include adding solairdrops‑sx.netlify.app to DNS‑based blocklists, firewalling outbound connections to 63.176.8.218, and monitoring Netlify‑hosted traffic for similar patterns. Because the underlying hosting provider is a legitimate content‑delivery service, blocking at the provider level may impact legitimate workloads; therefore, organizations should prefer granular controls such as URL filtering or content inspection. Continuous re‑evaluation is advised, given the active status and the potential for rapid re‑deployment under the same Netlify account.