meta-refund[.]surge[.]sh

This report analyzes the domain meta-refund.surge.sh. Based on the available data, the page title is unavailable, preventing a definitive assessment of the site's claimed purpose or brand impersonation. However, the domain name "meta-refund" suggests a potential phishing or scam operation targeting users of a social media or technology platform, likely attempting to trick victims into providing credentials or financial information under the guise of a refund process.

Technical evidence indicates malicious activity. VirusTotal detected 13 out of 95 security vendors flagging the domain as malicious, with specific alerts from ADMINUSLabs, alphaMountain.ai, BitDefender, Certego, and CyRadar. The domain also appears on 2 blocklists. It is registered with Surge.sh and hosted on the IP address 138.197.235.123, which is located in the United States and belongs to AS14061 DigitalOcean, LLC. The SSL certificate is issued by Sectigo Limited using Sectigo RSA Domain Validation Secure Server CA, and nameservers are ns1.surge.sh and ns2.surge.sh.

The domain is currently offline or down. Given the high detection rate by multiple security vendors and its presence on blocklists, the risk level is assessed as high. The domain represents a credible threat, likely associated with phishing or fraud, and should be blocked.