soliditycompilerdev[.]vercel[.]app

This domain presents itself as an official Ethereum Solidity compiler interface but is actually a malicious crypto-draining platform. The site mimics legitimate development tools for Ethereum smart contracts, specifically targeting ERC-20 developers who may attempt to compile or deploy code. When users connect their wallets to what appears to be a development environment, the site executes unauthorized transactions that drain cryptocurrency assets directly from connected wallets. The page title 'Ethereum Solidity Compiler - Smart-Contract EVM Deployer for ERC-20 Developers' is designed to appear authentic to developers searching for legitimate compiler resources. Analysis indicates this is a sophisticated brand impersonation operation. The domain currently shows 0 detections out of 95 security engines on VirusTotal, suggesting it may evade some automated detection systems. Infrastructure analysis reveals the site is hosted on Vercel infrastructure (216.198.79.67, AS16509) and uses a Google Trust Services SSL certificate (WR1). The domain appears on 3 security blocklists including PhishDestroy and MetaMask's protection systems, confirming its malicious nature. Registration details show Vercel Inc. as the hosting provider, though the malicious content is not officially sanctioned by the platform. If you have visited this domain or connected a wallet to it, immediate action is required. First, disconnect any wallets that were linked to the site and revoke all smart contract approvals using a blockchain explorer's token approval tool. Next, transfer all remaining assets to a new wallet address that has never been exposed to this domain. Monitor all connected accounts for unauthorized transactions and consider reporting the incident to relevant blockchain security teams. The domain remains active as of this report, so developers should verify all compiler interfaces through official Ethereum documentation before use.