solairdrops-oc[.]netlify[.]app

solairdrops-oc.netlify.app is currently resolved to the IP address 35.157.26.135 and is hosted on the Netlify platform. The domain remains active and the nameserver information is unavailable (NS_NOT_FOUND). VirusTotal records show that the site has been examined by 91 vendor engines, with no detection reported at the time of analysis. Intelligence tags the infrastructure as a crypto‑drainer, indicating that it is likely used to solicit cryptocurrency transfers from victims. The combination of a publicly hosted static site service, an active IP, and the crypto‑drainer classification suggests an adversary is leveraging a low‑cost, quickly deployable web presence to target cryptocurrency users. Unknown factors include the specific content served, the phishing or social engineering tactics employed, and whether any additional command‑and‑control or payment collection endpoints are associated. Defenders should consider adding the domain and its resolved IP to network blocklists, enforce outbound traffic monitoring for cryptocurrency transaction attempts to unknown destinations, and initiate deeper content analysis or sandbox retrieval to confirm the malicious behavior. Continuous monitoring for changes in DNS resolution, additional hosting infrastructure, or new detections on reputation services is recommended while the investigation remains ongoing.