soliditycompile[.]vercel[.]app

This domain, soliditycompile.vercel.app, is flagged for high-risk brand impersonation targeting Ethereum developers. Analysis indicates the site mimics a legitimate Solidity compiler and EVM deployer, presenting itself as a tool for ERC-20 smart contract development. The page title, 'Ethereum Solidity Compiler - Smart-Contract EVM Deployer for ERC-20 Developers,' reinforces the deception by leveraging Ethereum’s brand and terminology to lure victims into interacting with malicious infrastructure. No direct evidence of a crypto drainer kit has been observed, but the domain’s context suggests potential credential harvesting or wallet compromise vectors. Technical indicators confirm the domain resolves to IP address 64.29.17.67, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. The domain is registered through Vercel Inc., a platform commonly abused for rapid deployment of phishing sites. VirusTotal reports 0 detections out of 95 engines, indicating low initial detection rates despite its presence on three security blocklists. The SSL certificate is issued by Google Trust Services (WR1), providing a false sense of legitimacy. No creation date is available, but the domain remains operational and unflagged by major browser-based protection mechanisms. Current status shows the domain is still active, though it has been blocked by at least three security entities, including MetaMask and PhishDestroy. The absence of detections on VirusTotal and its continued operation pose a residual risk to developers and users unfamiliar with Ethereum’s official tooling. Recommended actions include immediate blacklisting of the domain and IP, monitoring for associated wallet addresses or redirect chains, and alerting the Ethereum developer community. Persistent threat actors may re-deploy similar infrastructure under new domains, necessitating ongoing vigilance for brand impersonation tactics in the cryptocurrency development ecosystem.