solairdrops-ex[.]netlify[.]app

Analysis of the domain solairdrops-ex.netlify.app indicates that it is currently active and associated with a crypto‑drainer operation. The domain is hosted on Netlify, as shown by the registrar information, and resolves to the IP address 35.157.26.135. VirusTotal has processed the domain with 91 vendor scanners; none have issued a detection, but the absence of alerts does not imply safety.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, demonstrating that at least one external threat‑intel source has identified it as malicious. Nameserver data could not be retrieved, as the query returned no results. No public SSL certificate details, HTTP status codes, page titles, or additional evidence links are presently available, leaving the exact content and delivery mechanisms of the campaign unverified.

The risk level is marked as "under investigation" and the infrastructure remains active. Defenders should treat the domain as hostile, add the domain and its resolving IP to network blocklists, monitor DNS queries for related look‑ups, and consider sinkholing traffic to the IP address pending further forensic analysis. Continuous observation of Netlify‑hosted assets and periodic re‑scanning with updated vendor signatures are recommended to capture any evolution of the threat.