monetization-under-request-support-on[.]surge[.]sh

Analysis of the domain monetization-under-request-support-on.surge.sh indicates a high risk of generic phishing. The domain is not associated with any specific brand or financial institution and does not appear to use a drainer kit. However, the presence of a misleading page title and the active status of the domain suggest it may be part of a broader phishing campaign.

Infrastructure analysis reveals that the domain is registered through Surge.sh and resolves to the IP address 138.197.235.123, which is hosted by DigitalOcean, LLC in California (CA). The SSL certificate is issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36. The domain appears on 1 security blocklist and is blocked by PhishDestroy. According to VirusTotal, 9 out of 95 security vendors have flagged this domain as malicious, indicating a moderate level of consensus among security tools. The domain was created on an unknown date, but it remains active.

Currently, the domain is still active, posing a significant risk to users who may visit it. Organizations and individuals should take immediate steps to block access to this domain and educate users about the potential dangers of phishing sites. Despite the domain being blocked by some security vendors, the remaining risk is high due to the potential for it to evade detection and continue to operate, targeting unsuspecting users.