flote-service-assistance-ca[.]surge[.]sh

Analysis of the domain flote-service-assistance-ca.surge.sh indicates it was actively flagged as a high-risk phishing site targeting users through social engineering tactics. The domain, created on February 21, 2026, was hosted on DigitalOcean, LLC infrastructure (AS14061) at IP address 138.197.235.123, located in the United States. As of the report date, the domain has been taken offline, returning an HTTP 404 status, and no page title or content could be retrieved for further classification. Security vendor detections on VirusTotal show 14 of 93 engines flagging the domain, while Google Safe Browsing explicitly classified it as social engineering.

The domain appears on at least one security blocklist, specifically PhishDestroy. The SSL certificate was issued by Sectigo Limited under the Sectigo RSA Domain Validation Secure Server CA, a common certificate authority that does not inherently indicate legitimacy. Registration was processed through Tucows Domains Inc., a widely used registrar with no unusual attributes in this case. No specific brand, scam category, or phishing kit was identified in the available data, and the exact nature of the social engineering content remains unconfirmed.

Defenders should treat this domain as malicious based on the existing detections and blocklist status. Network security teams are advised to review logs for connections to 138.197.235.123 or the domain itself, particularly between February and July 2026, and consider adding the domain to internal blocklists as a precautionary measure. The absence of page content limits further attribution, but the available indicators confirm its classification as a phishing threat.