solidity-compiler-v1-8-4[.]web[.]app
“Solidity Compiler - Smart-Contract Compiler for EVM & ERC-20 Developers”
solidity-compiler-v1-8-4.web.app — Konten tidak tersedia. Peniruan identitas merek: Google; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 2/91 (alphaMountain.ai, Forcepoint ThreatSeeker); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: Google Domains.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain solidity-compiler-v1-8-4.web.app is currently active and confirmed to host a crypto drainer phishing campaign. This site impersonates the Solidity compiler, a critical tool for Ethereum Virtual Machine (EVM) and ERC-20 smart contract developers. The page title, 'Solidity Compiler - Smart-Contract Compiler for EVM & ERC-20 Developers,' is designed to deceive developers into interacting with malicious smart contracts or disclosing private keys, leading to unauthorized asset transfers. Analysis indicates the domain was registered on June 14, 2026, through Google LLC, a legitimate registrar often exploited for hosting malicious content under its web.app subdomain service. The domain resolves to the IP address 199.36.158.100, a host associated with prior phishing activity. Security vendors have flagged this domain, with 2 out of 95 VirusTotal engines detecting it as malicious. Additionally, the domain appears on three security blocklists, including high-confidence threat intelligence feeds. The SSL certificate, issued by Google Trust Services (WR4), provides a false sense of security, as it is automatically provisioned for all web.app domains. As of the latest verification, the phishing site remains active and continues to pose a significant risk to developers and cryptocurrency users. It is strongly recommended to block the domain and its associated IP address at the network level. Users should verify the authenticity of any Solidity compiler tools by accessing them exclusively through official repositories or verified documentation. Organizations are advised to update their threat intelligence feeds to include this domain and monitor for related indicators of compromise, such as wallet addresses or contract interactions linked to this campaign.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 3 identified
Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.
firebase.google.com Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive