blue-badge-instant-apply.surge.sh

Multiple indicators suggest elevated risk at the time of this scan. The domain was flagged by 13 out of 91 security engines, with several classifying it as phishing or fraud-related, and multiple web-classification sources also categorized it as phishing. The page content and title reference "Meta Verified – Facebook," while the site is hosted on a third-party surge.sh subdomain rather than an official Meta-controlled domain, which may indicate brand impersonation intended to collect user information.

Additional context is mixed but does not outweigh the phishing signals. A malware scan did not detect malicious files at the time of analysis, and major content-malware threat databases listed in the scan were otherwise clean. However, the domain's IP address is listed on one mail-reputation blocklist, which is a minor cautionary signal, and the visible page design appears to mimic a legitimate social-media verification flow. Based on these findings, this website may pose potential risks to visitors.