soliditycompiler-v2-1[.]vercel[.]app

This domain, soliditycompiler-v2-1.vercel.app, presents a high-risk brand impersonation threat targeting Ethereum developers and users. The site masquerades as an official Solidity compiler and EVM deployer for ERC-20 smart contracts, using the page title 'Ethereum Solidity Compiler - Smart-Contract EVM Deployer for ERC-20 Developers.' Such impersonation is designed to deceive users into interacting with malicious smart contract tools, potentially leading to unauthorized access to cryptocurrency wallets, theft of private keys, or execution of harmful transactions. The domain specifically exploits the trust associated with Ethereum’s development ecosystem, a tactic commonly observed in crypto drainer and fraudulent deployment schemes. Analysis indicates the domain is currently active and registered through Vercel Inc., resolving to the IP address 216.198.79.195 within the Amazon.com, Inc. autonomous system (AS16509). Security vendor detection on VirusTotal stands at 2 out of 95, with the domain appearing on three distinct security blocklists. The SSL certificate is issued by Google Trust Services (WR1), which, while valid, does not mitigate the underlying malicious intent. Infrastructure review reveals the domain leverages Vercel’s hosting platform, a common vector for rapidly deployed phishing and impersonation sites due to its ease of registration and low barrier to entry. Users who have visited soliditycompiler-v2-1.vercel.app or interacted with its content should take immediate remedial action. Disconnect all active wallet sessions and revoke any smart contract approvals granted through the site using a trusted blockchain explorer or security tool. Conduct a full scan of the device for malware, particularly browser extensions or scripts that may have been introduced. Monitor all linked cryptocurrency wallets for unauthorized transactions and consider migrating funds to a new wallet if any suspicious activity is detected. Report the domain to relevant security communities and wallet providers to aid in broader mitigation efforts. Exercise heightened caution with any domain claiming to offer Ethereum development tools, verifying authenticity through official documentation or community-vetted sources.