compelete-verified-blue[.]surge[.]sh

Analysis of compelete-verified-blue.surge.sh indicates that the domain is actively leveraged for phishing. The domain resolves to the IP address 159.203.50.177 and is hosted through the Surge.sh platform, a service commonly used for rapid web deployments. Infrastructure inspection shows that no authoritative nameserver records are publicly visible, which is consistent with the NS_NOT_FOUND flag in the intelligence feed. The domain appears on two external blocklists and has been explicitly blocked by PhishDestroy and OpenPhish, both reputable anti‑phishing aggregators.

VirusTotal reports that 12 of 91 scanned security vendors have flagged the domain, reinforcing the suspicion of malicious intent. The site’s current status is listed as active, meaning that the phishing infrastructure remains operational. No additional data such as SSL certificate details, HTTP response codes, or page titles are available from the provided feed, leaving those aspects unverified at this time.

Defenders should treat the domain as hostile, enforce network‑level blocking, and add it to local threat intelligence sets. Continuous monitoring of the associated IP address and any future DNS resolution changes is advised, as the underlying hosting provider may host multiple malicious payloads. Organizations should also verify that any user‑initiated connections to this domain are blocked by web filters and that endpoint protection solutions are updated to recognize the 12 vendor detections reported by VirusTotal.