solairdrops-o5[.]netlify[.]app

This domain, solairdrops-o5.netlify.app, is currently flagged as an active crypto‑drainer operation. Infrastructure analysis shows the site is hosted on Netlify and resolves to the public IPv4 address 35.157.26.135. The domain’s DNS configuration does not return a traditional nameserver record, which is consistent with Netlify’s managed DNS service. No additional host or sub‑domain infrastructure has been observed beyond the primary A record. Intelligence indicates the threat remains under investigation, but no public malware or payload samples have been linked to the domain at this time. The lack of a nameserver entry and the reliance on a shared hosting platform make attribution difficult, and the single IP address may be shared with unrelated legitimate sites. Defenders should block outbound connections to 35.157.26.135 when possible, monitor DNS queries for the exact domain, and apply heuristic detection for crypto‑drainer activity in network traffic. Continuous observation of Netlify‑hosted assets for changes in content or additional records is recommended, as any future modifications could indicate escalation. Until further indicators are gathered, the domain should be treated as suspicious and included in threat‑intel feeds.