solairdrops-wm[.]netlify[.]app

solairdrops-wm.netlify.app is currently active and has been classified as a crypto‑drainer. The domain was provisioned through Netlify and does not publish authoritative name‑server records; DNS queries return NS_NOT_FOUND. Resolution points to the IPv4 address 63.176.8.218, which is the only infrastructure observed. The site has been submitted to VirusTotal and examined by 91 scanning engines; none have generated a detection at the time of analysis, though the absence of a flag does not constitute assurance of legitimacy. The threat label indicates that the site is likely used to lure victims into transferring cryptocurrency to attacker‑controlled wallets, a pattern commonly observed in crypto‑drainer campaigns. No further artefacts such as page titles, brand references, or malicious payload hashes have been released, leaving the exact attack flow and victim interaction unknown. Defenders should treat the domain as hostile, incorporate the host IP into blocklists, and monitor outbound traffic for anomalous cryptocurrency transactions originating from internal hosts. Continuous re‑analysis of the domain on VirusTotal and periodic WHOIS lookups are recommended to capture any changes in hosting or detection status.