surveillance-crypto[.]com

Analysis as of July 22 2026 indicates that surveillance-crypto.com remains active and was registered on April 07 2026 through Shock Hosting LLC. The domain resolves to the IPv4 address 210.16.64.168 and uses the provider’s default nameservers ns1.shockhosting.com and ns2.shockhosting.com. The site has been added to at least one public blocklist and is currently listed by the PhishDestroy monitoring service, confirming that threat‑intelligence feeds consider it malicious. A VirusTotal scan involving 95 anti‑malware engines returned no detections; however, the absence of signatures does not constitute assurance of benign behavior and should be interpreted as a lack of known indicators at the time of scanning.

No public information about SSL certificate details, HTTP response codes, Safe Browsing status, Open Threat Exchange references, or page‑title metadata is available, leaving those vectors unverified. The exact content served by the domain, including any login prompt or credential‑harvesting form, has not been publicly disclosed, and no TLS certificate information is observable from the current data set. The registrar information and hosting infrastructure point to a generic hosting provider rather than a brand‑specific operation, and no evidence of a targeted brand or credential‑stealing page has been disclosed.

Defenders should continue to block the domain at perimeter and DNS layers, monitor for any future changes in reputation or detection status, and consider adding the domain to internal blocklists. Ongoing surveillance of the IP address 210.16.64.168 for related malicious activity is recommended, as is periodic re‑scanning with multi‑engine services to capture emerging signatures.