sui-scallop-dapp-eiw8coepr-scallop-team[.]vercel[.]app
“Scallop”
sui-scallop-dapp-eiw8coepr-scallop-team.vercel.app — 未验证. 品牌冒充:MetaMask; 诈骗类型:Impersonation. 证据摘要: VirusTotal 11/91 (ChainPatrol, alphaMountain.ai, BitDefender, Forcepoint ThreatSeeker, Fortinet); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 83/100. 注册商: Vercel.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain is flagged as a generic phishing threat as of August 03, 2026, with an elevated risk level and active status. Infrastructure analysis reveals the domain is hosted on Vercel, a common platform for rapid deployment of fraudulent sites. The domain name, sui-scallop-dapp-eiw8coepr-scallop-team.vercel.app, suggests an attempt to impersonate a decentralized application related to the Sui blockchain and the Scallop DeFi protocol, though the exact content of the page has not yet been analyzed and no specific brand or kit has been confirmed from the provided data. Detection coverage includes three security blocklists, and VirusTotal reports that 4 out of 91 security vendors flag this domain as malicious, indicating moderate but not universal recognition of the threat.
Blocking is enforced by PhishDestroy, MetaMask, and SEAL, which are reputable security tools that have added this domain to their deny lists. Uncertainties remain regarding the specific scam methodology, whether it involves credential theft, wallet drainers, or fake token approvals, as no page title, SSL certificate details, or HTTP status information were provided. Defenders should treat this domain as an active threat, block it at the DNS and email gateway levels, and monitor for subdomains or similar Vercel-hosted variants. Users who have interacted with this domain should assume their credentials or wallet permissions may be compromised and take immediate action, including rotating passwords and revoking any token approvals.
The elevated risk level and active status indicate that the domain is currently operational and may be used in ongoing campaigns targeting crypto users. Further investigation is recommended to capture the page content and identify the hosting account for takedown requests. No evidence links were supplied in this report, but the domain's presence on multiple blocklists and vendor detections supports a cautious approach.
威胁响应 Pipeline
公共封禁名单状态
域名情报
技术细节DNS、SSL SAN、时间戳
所用技术 · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com 置信度 100%VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of sui-scallop-dapp-eiw8coepr-scallop-team.vercel.app · checked Aug 3, 2026
网站配置分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。