permanent-badge-free[.]surge[.]sh

PhishDestroy has identified permanent-badge-free.surge.sh as a generic phishing threat, currently assigned an elevated risk level. This domain, hosted on surge.sh, does not impersonate a specific brand but exhibits characteristics typical of credential harvesting or other phishing schemes. No specific drainer kit has been associated with this domain, but the broad threat classification warrants caution.

Technical analysis reveals that VirusTotal flags this domain with a score of 14 out of 95 security vendors, indicating significant detection across the security community. The domain resolves to IP address 138.197.235.123 and uses an SSL certificate issued by Sectigo Limited via their Sectigo RSA Domain Validation Secure Server CA. It appears on two security blocklists, and the page title "project not found" suggests the site may have been taken down or misconfigured. The domain is registered through Surge.sh, a platform often abused for hosting phishing pages.

Currently, the domain is offline, which reduces the immediate risk to users. However, the elevated risk level and detection by multiple vendors suggest that this domain was actively used for malicious purposes. Users should remain vigilant and avoid visiting any similar domains. PhishDestroy recommends verifying any unexpected links or login pages through official channels and using the PhishDestroy tool to check domain safety before interacting.