compound-charts[.]vercel[.]app

This domain, compound-charts.vercel.app, is flagged as a high-risk brand impersonation phishing site targeting the Compound cryptocurrency protocol. Analysis indicates the presence of an Ethereum drainer kit, designed to siphon funds from victims' wallets by mimicking legitimate Compound interfaces. The page title, 'Compound × EthGlobal,' suggests an attempt to exploit trust in the EthGlobal hackathon brand, likely to lure participants or users familiar with Compound's ecosystem. Infrastructure analysis reveals the following technical indicators: the domain is detected by 7 out of 95 security vendors on VirusTotal, with a registration date of February 21, 2026, through Tucows Domains Inc. It resolves to the IP address 64.29.17.67, hosted on Amazon.com, Inc.'s AS16509 in the United States. The SSL certificate is issued by Google Trust Services (WR1). The domain appears on one security blocklist, specifically PhishDestroy, and is not currently listed on Google Safe Browsing. As of the latest assessment, compound-charts.vercel.app remains active, posing an ongoing threat to users. Immediate response actions include blocking the domain at the network level and revoking access to associated IP addresses. Despite these measures, the risk of financial loss persists for users who interact with the site. Security teams are advised to monitor for similar domains registered through Tucows and hosted on cloud infrastructure, as this pattern aligns with known phishing campaign tactics. Users should verify domain authenticity before connecting wallets and report suspicious activity to relevant security platforms.