solairdrops-5n[.]netlify[.]app

Analysis of solairdrops-5n.netlify.app indicates that the domain is actively being used as a crypto drainer. The site is hosted on Netlify, as indicated by the registrar information, and resolves to the IPv4 address 63.176.8.218. VirusTotal records show that the domain has been submitted to 91 scanning engines, and at the time of the latest query none of those engines have generated a detection. While the absence of detections does not constitute a safety guarantee, it demonstrates that the malicious payload, if any, has not yet been identified by the listed scanners.

The domain appears on three external security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple threat‑intelligence sources have classified the site as hostile. Nameserver information is unavailable (NS_NOT_FOUND), which limits the ability to assess DNS redundancy or potential fallback infrastructure. No additional telemetry such as SSL certificate details, HTTP response codes, or page title content is currently available, leaving the surface‑level characteristics of the web content unverified.

Defenders should treat the domain as high‑risk, given its classification as a crypto drainer and its active status. Recommended mitigation steps include adding the domain and its resolved IP address to network‑level deny lists, configuring browser and wallet extensions to block connections to the host, and monitoring outbound traffic for attempts to contact 63.176.8.218. Continuous re‑scanning with multi‑vendor platforms is advised to capture any future payload updates, and any observed credential or wallet interactions with the site should be treated as compromised and investigated according to incident‑response procedures.