nouvelle-reforme-info[.]surge[.]sh

The domain nouvelle-reforme-info.surge.sh is flagged as a high‑risk generic phishing infrastructure. It was registered on February 21, 2026 through Tucows Domains Inc. and resolves to the IP address 159.203.159.100, which belongs to DigitalOcean, LLC (AS14061) in the United States. The site presents an SSL certificate issued by Sectigo Limited under the Sectigo RSA Domain Validation Secure Server CA, confirming the presence of HTTPS support.

An HTTP request returns a 404 status code, and the page title is reported as "Unavailable," indicating that the landing page is either removed or never served. VirusTotal analysis shows that 13 of 95 scanned security vendors flagged the domain, providing independent confirmation of malicious intent. Google Safe Browsing classifies the URL as a social engineering threat, and the domain appears on a single external blocklist managed by PhishDestroy.

Current operational status is offline, but the historical evidence suggests the domain was used for phishing campaigns before takedown. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration attempts, and review logs for connections to the associated IP address. Because the actual malicious payload and targeted brand are not disclosed in the available data, further investigation is required to determine the full scope of the campaign.