solidity-compiler-v2-0-4[.]web[.]app

This domain presents a high-risk crypto drainer attack disguised as a Solidity smart-contract compiler. The site mimics legitimate development tools for Ethereum Virtual Machine (EVM) and ERC-20 token creation, targeting software developers and blockchain engineers. Visitors who connect wallets or execute code through this interface risk unauthorized transaction signing, leading to direct asset theft from connected cryptocurrency wallets. The threat specifically exploits the trust associated with development environments to bypass user caution. Analysis indicates the domain was registered through Google LLC and currently resolves to 199.36.158.100, hosted on infrastructure operated by Fastly, Inc. in the United States. Despite its active status and convincing page title—'Solidity Compiler - Smart-Contract Compiler for EVM & ERC-20 Developers'—it has not been flagged by any of the 95 security engines on VirusTotal as of the latest scan. However, it appears on three independent security blocklists, and multiple wallet protection systems have already implemented blocks against it. The SSL certificate, issued by Google Trust Services, provides transport encryption but does not validate the legitimacy of the site’s content. Users who have visited solidity-compiler-v2-0-4.web.app should immediately disconnect any connected wallets and revoke all active smart-contract authorizations linked to the domain. It is recommended to audit recent transactions for unauthorized activity and monitor connected accounts for signs of compromise. No sensitive data, including private keys or recovery phrases, should be entered on the site. If code execution or wallet interaction occurred, affected devices should be scanned for malware, and wallet software reinstalled from official sources. Future interactions with development tools should be limited to verified, official platforms to prevent similar threats.