solairdrops-uj[.]netlify[.]app

solairdrops-uj.netlify.app is hosted on Netlify and resolves to the IPv4 address 63.176.8.218. The domain was registered through Netlify’s free‑hosting service and its authoritative nameserver information is unavailable (NS_NOT_FOUND). Current scans on VirusTotal show that the URL has been submitted to 91 AV engines; none have raised a detection, but the absence of alerts does not confirm benign intent. Intelligence tags the site as a fake‑airdrop crypto drainer, a common vector for extracting cryptocurrency from unsuspecting victims by promising free token distributions. The domain remains active as of 17 July 2026, indicating that the malicious infrastructure is still operational. Because the hosting provider allows rapid deployment of short‑lived sites, attribution is limited and the underlying payload has not been publicly disclosed. Defenders should treat the domain as malicious, add the IP 63.176.8.218 to blocklists, and monitor Netlify sub‑domains for similar patterns. Continuous re‑scanning and correlation with network traffic that attempts to contact the domain are recommended to detect potential credential or wallet‑address harvesting attempts.