scallopdesktop[.]com

PhishDestroy identifies scallopdesktop.com as a live brand impersonation domain targeting Sui users, masquerading as a legitimate 'Scallop Desktop' application. The page title explicitly leverages Sui’s brand identity with the phrase 'The Next Generation Money Market on Sui,' suggesting an intent to deceive users into connecting crypto wallets under false pretenses. While no drainer kit artifacts were observed in the surface scan, the domain’s thematic alignment with Sui’s ecosystem and the presence of a crypto-related money market concept strongly imply the potential for malicious wallet-draining functionality, either now or in future iterations. The domain’s early-stage registration and low detection profile warrant heightened scrutiny as this threat evolves.

Technical indicators for scallopdesktop.com reveal a concerning yet still-developing threat profile. The domain exhibits 0 detections out of 95 engines on VirusTotal, indicating it has evaded most signature-based detection systems to date. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 216.198.79.1. The domain was created on May 05, 2026, and currently holds a valid SSL certificate issued by Let's Encrypt. Google Safe Browsing (GSB) has not flagged the domain as malicious, and no public blocklist entries were detected at the time of analysis. These characteristics suggest a newly deployed, possibly automated, impersonation campaign operating with minimal interference from security vendors.

As of this advisory, scallopdesktop.com remains active and under active threat investigation, classified as 'active' with a current risk level marked as 'under_investigation.' While no immediate takedown action has been confirmed, immediate response measures include adding the domain to network blocklists, flagging it within threat intelligence platforms, and raising awareness among Sui users to avoid interacting with the domain. The low detection count and fresh registration date imply this domain may be part of a broader, evolving campaign. Users are advised to treat all communications referencing 'Scallop Desktop' or similar Sui-related services with extreme caution, verify endpoints via official channels, and avoid initiating wallet connections from untrusted domains. Remaining risk is classified as elevated due to the domain’s active status and potential for rapid escalation in capability.