feeble-brothers[.]surge[.]sh

Analysis of the domain feeble-brothers.surge.sh indicates it was a generic phishing endpoint hosted on DigitalOcean infrastructure in Germany. The domain, created on February 21, 2026, resolved to the IP address 138.68.112.220, part of AS14061 (DigitalOcean, LLC). At the time of assessment, the site returned an HTTP 404 status, suggesting it had been taken offline or removed. No page content or title was retrievable, leaving the specific phishing target or campaign details unconfirmed.

Security vendor detections on VirusTotal showed 8 of 93 engines flagging the domain as malicious, though the absence of additional context limits conclusions about the exact nature of the threat. The domain appeared on at least one security blocklist, specifically PhishDestroy, reinforcing its classification as phishing-related. The SSL certificate was issued by Sectigo Limited under the Sectigo RSA Domain Validation Secure Server CA, a common certificate authority that does not inherently indicate legitimacy or malicious intent. Infrastructure analysis reveals the domain was registered through Tucows Domains Inc., a registrar frequently used for both legitimate and malicious domains.

The hosting provider, DigitalOcean, is known to host a mix of benign and malicious content, and the German IP location aligns with common bulletproof hosting patterns. Defenders should treat this domain as part of a broader phishing infrastructure, particularly if observed in logs or proxy data. Monitoring for related subdomains or IP reuse under the same ASN may help identify further malicious activity. Given the current offline status, no immediate remediation actions are required beyond standard blocklist updates and retrospective log analysis.