instant-apply-get-free-verified[.]surge[.]sh

PhishDestroy identifies instant-apply-get-free-verified.surge.sh as an active phishing domain posing as a fake job verification service to harvest personal and financial data. This domain mimics legitimate employment verification platforms to deceive users into entering sensitive information under the guise of instant job application approvals. No specific brand or drainer kit (e.g., MetaMask, wallet drainers) is explicitly associated with this domain in current threat intelligence, but the operational pattern aligns with credential harvesting and fraudulent job scams.

This domain resolves to IP 159.203.50.177 and is registered through Surge.sh. According to VirusTotal, it is flagged by 12 out of 95 security vendors. It carries a valid SSL certificate issued by Sectigo Limited and was detected as malicious by OpenPhish. Additionally, this domain appears on 1 security blocklist. No creation date is provided in the available intelligence, but the operational window is currently active.

The domain remains active and poses an elevated risk of credential theft and financial fraud. Immediate caution is advised: avoid interacting with this site and report any suspicious activity. Users who have entered information should monitor accounts for unauthorized access and change passwords immediately. Although the threat is elevated, proactive detection by security tools and blocklists has reduced immediate exposure. Remain vigilant—this phishing operation continues to evolve and may reappear under new domains or subdomains.