acctverifytele[.]surge[.]sh

The domain acctverifytele.surge.sh was a credential-phishing site designed to harvest login credentials from victims. It did not impersonate a specific brand or use a known drainer kit. As of the latest verification, acctverifytele.surge.sh has been taken offline, though it previously posed an elevated risk of credential theft.

Technical indicators show that acctverifytele.surge.sh was flagged by 14 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and BitDefender. It appeared on one security blocklist (PhishDestroy) and was not flagged by Google Safe Browsing. The domain was registered through Tucows Domains Inc. on February 21, 2026, and resolved to the IP address 159.203.50.177, hosted by DigitalOcean, LLC in Canada. The SSL certificate was issued by Sectigo Limited, and the page title was unavailable at the time of analysis. The HTTP status returned was 451, indicating the site was taken offline.

Victims of credential phishing via acctverifytele.surge.sh should immediately change passwords for any accounts entered on the site and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any suspected fraud to the affected service providers. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If financial or personal data was exposed, consider contacting relevant authorities or identity-protection services.