solairdrops-uy[.]netlify[.]app

Analysis of solairdrops-uy.netlify.app as of August 01, 2026 indicates that the domain is actively associated with a crypto‑drainer campaign. The site is registered through Netlify, a cloud‑hosting platform that provides free static‑site services, and resolves to the IP address 35.157.26.135, an AWS endpoint commonly leveraged by Netlify deployments. DNS queries return NS_NOT_FOUND, meaning authoritative nameserver records are not publicly disclosed, a characteristic often seen in short‑lived malicious infrastructure.

The domain has been scanned by 91 VirusTotal vendors; none reported a detection, but the absence of alerts does not constitute assurance of legitimacy. Independent security feeds have placed the domain on two blocklists, and it is explicitly blocked by PhishDestroy and SEAL, confirming that multiple threat‑intel aggregators consider it malicious. No additional data on SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts is currently available, leaving those vectors unverified.

Given the confirmed classification as a crypto drainer and the presence on reputable blocklists, defenders should treat the domain as hostile. Recommended actions include adding the domain and its resolving IP to network deny lists, monitoring DNS queries for related lookups, and employing outbound traffic controls to prevent connections to the host. Continuous re‑evaluation is advised, as the infrastructure may evolve or new indicators could emerge from future scans or threat‑intel updates.