sommia.network

It has been listed by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. Gridinsoft assigned a trust score of 0 out of 100, indicating a high confidence of malicious intent. AlienVault OTX includes the domain in one threat‑intelligence pulse, further corroborating its association with crypto‑related scams. No additional content or payload details have been published, and the exact phishing landing page layout remains unverified because the site is offline. The limited number of vendor detections suggests that many scanners have not yet observed the payload, but the presence on multiple blocklists and the low trust score provide strong evidence of abuse.

Defenders should block resolution of 2606:4700:3035::ac43:c786 at the network perimeter and add sommia.network to URL filtering and email security policies. Continuous monitoring of Cloudflare‑hosted IPv6 ranges for similar airdrop‑related activity is advised. Incident response teams should treat any email or message referencing a “Somnia Airdrop” as suspicious and quarantine related artifacts. Finally, maintain updated threat‑intel feeds to capture any re‑use of the domain or its infrastructure in future campaigns.