surgecapitals[.]io

On July 24, 2026 analysts observed that the domain surgecapitals.io, registered on February 21, 2026, is currently offline but was previously serving a page titled “From Stocks to Crypto: Invest in Assets on SurgeCapitals - SurgeCapitals.” The site resolved to IP address 104.219.248.95, which is hosted by Namecheap, Inc. in the United States under ASN 22612. SSL inspection shows a Sectigo RSA Domain Validation Secure Server CA certificate covering the domain, indicating a valid TLS configuration at the time of capture. The domain has been added to three security blocklists and is actively blocked by PhishDestroy, ScamSniffer, and Enkrypt.

VirusTotal reports indicate that the site was scanned by 95 vendors, none of which flagged the content, but this absence of detections does not constitute proof of benign intent. The limited intelligence does not reveal the full payload or any associated command‑and‑control infrastructure, and no additional malicious artifacts have been publicly disclosed.

Defenders are advised to continue blocking the domain and its resolving IP, monitor for any re‑hosting attempts, and include the certificate fingerprint in their threat‑intel feeds. Organizations should also update URL filtering and safe‑browsing lists to reflect the presence of surgecapitals.io on known blocklists, and remain vigilant for replicas that may reuse the same branding or page title in future campaigns.