solidity-compiler[.]net

This domain, solidity-compiler.net, is identified as a crypto drainer targeting developers and users in the blockchain ecosystem. Analysis indicates the site impersonates a legitimate Solidity smart contract compiler, tricking victims into interacting with malicious smart contracts or exposing private keys. The threat is designed to siphon cryptocurrency assets from connected wallets by exploiting trust in development tools, a tactic increasingly observed in decentralized finance (DeFi) phishing campaigns. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain was registered on March 11, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.34.50 and is flagged by 4 out of 95 security vendors on VirusTotal, including detections for phishing and malicious content. The domain appears on one security blocklist and has a trust score of 0/100, further corroborating its fraudulent nature. Detected technologies include PHP, Cloudflare, and HTTP/3, which are often leveraged to obfuscate malicious activity and enhance site performance to appear legitimate. Users who visited solidity-compiler.net or interacted with its content should take immediate action to mitigate risk. Disconnect any wallets linked to the site and revoke permissions for all connected smart contracts using a blockchain explorer or wallet management tool. Scan the device for malware, as phishing sites may deploy additional payloads. Monitor wallet activity for unauthorized transactions and report any suspicious behavior to relevant blockchain security platforms. Given the elevated risk level, affected users are advised to transfer assets to a new wallet and avoid reusing compromised credentials or private keys.