sui-scallop-dapp-eyrfy5vjr-scallop-team[.]vercel[.]app

PhishDestroy identifies the domain sui-scallop-dapp-eyrfy5vjr.vercel.app as an active crypto drainer posing as the Scallop DeFi platform. This malicious site lures users into connecting crypto wallets under the guise of a legitimate Scallop dApp interface, where it executes unauthorized transactions to drain funds. The threat is elevated due to its deployment on Vercel’s infrastructure, which adds a veneer of legitimacy, while its underlying code contains drainer scripts designed to siphon assets upon wallet connection. Users who interact with this domain risk immediate financial loss without recourse, as crypto transactions are irreversible. This domain was flagged by multiple security systems with concrete evidence of malicious intent. VirusTotal analysis shows 2 out of 95 security vendors have marked it as malicious. It is blocked by SEAL and MetaMask, two widely used security tools in the crypto ecosystem. The domain resolves to IP address 216.198.79.195 and is registered through Vercel Inc., leveraging the platform’s legitimate CDN and hosting services to appear credible. Its inclusion on two security blocklists further confirms its status as a verified threat. If you visited this domain, disconnect your wallet immediately and revoke any connected permissions through your wallet’s interface or dedicated revocation tools like revoke.cash. Do not interact with any pop-ups or transaction prompts, even if they claim to be ‘fixing’ issues. Report the domain to your wallet provider and security extensions like MetaMask or Phantom. Always verify dApp URLs via official Scallop channels before connecting wallets, and use hardware wallets for added protection. Stay vigilant against similar crypto drainers targeting Sui ecosystem users.