sui-scallop-dapp-dldpaij2u-scallop-team[.]vercel[.]app

The domain sui-scallop-dapp-dldpaij2u-scallop-team.vercel.app is confirmed to be an active phishing site engaging in brand impersonation, specifically targeting Discord users. Analysis indicates the page mimics legitimate Discord login or verification interfaces, likely designed to harvest credentials or distribute malicious payloads. The site remains operational as of the latest verification, posing a high risk to unsuspecting users. Infrastructure analysis reveals the domain was registered through Vercel Inc. on March 3, 2026, and resolves to the IP address 216.198.79.67, located in the United States under AS16509 (Amazon.com, Inc.). The SSL certificate is issued by Google Trust Services (WR1), a common feature in both legitimate and malicious sites. Detection metrics show the domain is flagged by 2 of 95 security vendors on VirusTotal and appears on three independent security blocklists. The page title, 'Scallop App,' suggests an attempt to impersonate a legitimate service, further corroborating the phishing intent. Current status confirms the domain remains active, with no evidence of takedown or mitigation. Users are advised to exercise extreme caution and avoid interacting with the site. Network administrators should implement blocking measures for the domain and associated IP address. Security teams are recommended to monitor for similar patterns, including Vercel-hosted subdomains with randomized strings, as these are frequently leveraged in phishing campaigns. Immediate reporting to the hosting provider and relevant security organizations is encouraged to facilitate swift remediation.