2toapply-willforwhere.surge.sh
Category: Information Technology, Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of 2toapply-willforwhere.surge.sh
This domain appears to host a webpage styled as a "Meta Verified" promotional and verification page, claiming that visitors are eligible for a free verified badge for Facebook pages. Based on the screenshot, the site uses branding and wording associated with Meta and Facebook, and presents a call to action inviting users to begin a verification process.
The domain itself, 2toapply-willforwhere.surge.sh, does not appear to be an official Meta or Facebook web property. It is hosted on a public static hosting platform under a surge.sh subdomain, which may allow users to publish temporary or low-cost pages. The content and layout suggest the page may be intended to imitate a social-media account verification offer rather than represent an independent technology service.
Safety Assessment for 2toapply-willforwhere.surge.sh
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 8 out of 91 security engines, with several classifying it as phishing-related, and multiple web-classification sources also associated it with phishing or fraud themes. In addition, the screenshot shows a page that appears to imitate Meta branding and promotes a "free verified badge" offer, which is a common social-engineering pattern used to solicit credentials or other sensitive information.
At the same time, some checks were clean: the malware scan did not identify flagged files, and major threat-database and blacklist checks did not detect active malware or known phishing URLs at the time of this scan. However, clean file-scan results do not outweigh the combination of multi-engine phishing detections and the apparent imitation of a well-known brand on an unrelated subdomain.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by Sectigo Limited, expiring in December 2026. It appears to be hosted on Surge infrastructure, with the server IP attributed to DigitalOcean in Frankfurt, Germany. The domain uses nameservers associated with surge.world, which is consistent with deployment on a hosted publishing platform.
The parent domain age is relatively old, but this is a hosted subdomain, so the age of the base domain does not necessarily reflect the age or trustworthiness of the specific page. DNSSEC appears to be unsigned, and no major blacklist-database hits were reported at the time of this scan. The main technical concern is not the TLS setup, but the apparent use of a third-party hosted subdomain to present branding associated with another company.
Share your experience with this website. Was it safe? Did you encounter any issues?