solairdrops-dw[.]netlify[.]app

Analysis of solairdrops-dw.netlify.app indicates active malicious activity targeting cryptocurrency wallets. The domain is listed on three external blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, confirming its classification as a crypto drainer. VirusTotal reports that the domain was examined by 91 scanning engines, none of which raised a detection at the time of analysis; this absence of flags does not constitute a safety guarantee and may reflect evasion or limited coverage.

No public information is available regarding the registrar, registration date, ASN, or geographic hosting location, leaving the underlying infrastructure opaque. HTTP responses, SSL certificate details, and page title have not been disclosed in the current intelligence set, so content‑based indicators cannot be evaluated. The primary observable evidence is the domain's presence on multiple blocklists and the explicit denial by wallet‑related security products, which together provide a strong indicator of malicious intent.

Uncertainty remains around the exact payload delivery method, the specific cryptocurrency addresses involved, and any potential command‑and‑control infrastructure. Defenders should continue to block the domain at network perimeters, enforce URL filtering, and ensure that cryptocurrency wallet extensions such as MetaMask remain updated with the latest threat feeds. Monitoring for any future detections, changes in blocklist status, or additional intelligence from sandbox analyses is recommended to refine the risk posture as the investigation proceeds.