solidity-compiler-v1-8-6[.]web[.]app

PhishDestroy identifies solidity-compiler-v1-8-6.web.app as an active phishing domain specifically targeting cryptocurrency users through a fake Ethereum Solidity compiler distribution. This domain mimics the official Solidity compiler (v1.8.6) to deceive developers and users into downloading malicious software designed to compromise crypto wallets or steal private keys. As of the latest assessment, the site remains operational and has not yet been flagged by security vendors. Technical analysis reveals that solidity-compiler-v1-8-6.web.app is hosted on Google's Firebase platform (web.app) and secured with an SSL certificate issued by Google Trust Services, lending it a veneer of legitimacy. VirusTotal reports 0 detections out of 95 security vendors, indicating the domain has evaded widespread detection thus far. The domain was registered through Firebase's automated system, with no traditional registrar or creation date publicly available. No IP address blacklisting or low trust scores have been recorded in major threat intelligence feeds, further complicating early identification. The absence of detections underscores the sophistication of this campaign, which likely employs obfuscation techniques to bypass automated scanners. The current status of solidity-compiler-v1-8-6.web.app is classified as active and under investigation by PhishDestroy's threat intelligence team. Users are strongly advised to avoid interacting with this domain or downloading any files from it. Cryptocurrency developers and holders should verify the authenticity of compiler downloads exclusively through the official Solidity GitHub repository or the Ethereum Foundation's website. Browser-based warnings or endpoint protection tools may not yet recognize this threat, so manual verification is critical. If you have visited this domain or executed any files from it, immediately disconnect the device from the internet, scan for malware using updated security software, and consider migrating crypto assets to a new wallet. Report the domain to Google Safe Browsing, VirusTotal, and relevant crypto security communities to aid in its takedown.