unable-beggar[.]surge[.]sh

On July 25, 2026, the domain unable-beggar.surge.sh was flagged as a generic phishing domain. The domain is currently offline, with an HTTP status of 404, indicating that the page is not available. Infrastructure analysis reveals that the domain is registered through Surge.sh and resolves to the IP address 188.166.132.94, which is located in the Netherlands and is part of the AS14061 DigitalOcean, LLC network. The SSL certificate for this domain is issued by Sectigo Limited, specifically the Sectigo RSA Domain Validation Secure Server CA.

The page title for the domain is 'Unavailable,' which suggests that the site may have been taken down or is no longer active. However, the domain appears on one security blocklist and is blocked by PhishDestroy, indicating prior malicious activity. The domain has been flagged by 14 out of 95 security vendors, suggesting a moderate level of suspicion. Defenders should remain vigilant and ensure that this domain is blocked within their network security systems to prevent any potential phishing attempts.

Given the current offline status, monitoring should continue to detect if the domain becomes active again. Additionally, defenders should review any recent network traffic logs to identify and block any related domains or IPs that may still be active. The exact content and target of the phishing attempt are not yet analyzed, but the domain's history and current status provide sufficient evidence to classify it as a potential threat.