new-click-app-99.surge.sh favicon

new-click-app-99.surge.sh

Category: Phishing

Scanned: Aug 31, 2026, 15:51 UTC · First seen: Aug 31, 2026 · Threat Engines: 10 / 91 · Times Scanned: 1
5 / 100 Trust Score Based on scan findings at the time of analysis
Potentially Dangerous
0 - High Risk50 - Moderate100 - No Threats
Not scanned has not been scanned yet. Hit Scan Now to check it.

Scans can take up to 5 minutes to complete. Please keep this tab open - we'll redirect you to the report when it's ready.

Failed
Scan unavailable
Scan failed
Protect yourself from potentially harmful websites
Combo Cleaner's real-time web protection module actively blocks access to scam, phishing & malware-infected websites.
★★★★★ 4.8 / 5 Recommended by PCrisk.com editors Windows · Mac · Android · iOS
Download Combo Cleaner Free scan · no signup

To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.

Get PCrisk security checks in your Google results Add PCrisk as a preferred source and our scan reports and malware guides are prioritised for you in Google.
Add PCrisk as preferred source
Screenshot of new-click-app-99.surge.sh Captured Aug 31, 2026
https://new-click-app-99.surge.sh
Screenshot of new-click-app-99.surge.sh
This website has been flagged as potentially harmful
Screenshot blurred for safety. Multiple security engines flagged potential threats at the time of scanning.
12 years (surge.sh)
Not Ranked - This website does not appear in the Tranco top list
Flagged by 10 of 91 engines
✓ Valid (TLS)
DigitalOcean, LLC
Frankfurt am Main, Germany
Surge
Unknown
138.68.112.220
Domain & WHOIS Information
Registrar Porkbun LLC
Registered July 25, 2014 (surge.sh)
Expires July 25, 2027
Name Servers ns1.surge.world
DNSSEC Unsigned
Hosting DigitalOcean, LLC
This site is hosted on surge.sh - a free hosting platform. The WHOIS data above belongs to the platform, not to new-click-app-99.surge.sh. The actual creation date of this subdomain is unknown and could be as recent as today.
Reputation & Threat Check 91 security engines checked
10
10 of 91 engines flagged this website Flagged by 10 security vendors at the time of scanning
Not flagged Flagged
Flagged by 10 of 91 engines
Direct Threat Database Sources
View detailed engine results on VirusTotal
File Scan Summary Powered by Quttera Engine
5 files scanned
No threats
5
Low Risk
0
Medium Risk
0
High Risk
0
No threats Low Risk Medium Risk High Risk
new-click-app-99.surge.sh/main.js 12.9 KB No threats
new-click-app-99.surge.sh/style.css 16.1 KB No threats
new-click-app-99.surge.sh/favicon.ico 8.1 KB No threats
new-click-app-99.surge.sh/config.js 1.0 KB No threats
new-click-app-99.surge.sh/# 5.3 KB No threats
External Links & Domains
7
External Links
All Clean
0
Iframes
Clean
4
Referenced Domains
All Clean
0
Flagged Resources
None Detected
http://new-click-app-99.surge.sh/config.jsNot flagged
http://new-click-app-99.surge.sh/favicon.icoNot flagged
http://new-click-app-99.surge.sh/main.jsNot flagged
http://new-click-app-99.surge.sh/style.cssNot flagged
https://cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.jsNot flagged
https://code.cdn.mozilla.net/fonts/fira.cssNot flagged
https://surge.shNot flagged
cdn.jsdelivr.netNot flagged
code.cdn.mozilla.netNot flagged
new-click-app-99.surge.shNot flagged
surge.shNot flagged
new-click-app-99.surge.sh Overview

Description of new-click-app-99.surge.sh

This domain appears to host a simple web application presented as a cryptocurrency transfer interface. The page title, "Transfer Trust Wallet," and the visible form fields suggest it is intended to facilitate or simulate sending USDT on Binance Smart Chain, with inputs for a wallet address or domain name and transfer amount.

Based on the screenshot and metadata, the site does not appear to represent a full corporate website or established financial platform. Instead, it looks like a lightweight single-page app deployed on a Surge subdomain, which may indicate temporary or low-cost hosting rather than an official branded service. No clear operator identity, company details, or supporting business information are visible from the provided scan data.

Safety Assessment for new-click-app-99.surge.sh

The scan results indicate elevated risk signals at the time of this scan. The domain was flagged by 10 out of 91 security engines, with multiple detections classifying it as phishing-related. In addition, the page presents itself as a Trust Wallet-related transfer tool while using an unrelated Surge subdomain, which may increase the likelihood of misleading branding or credential/asset-harvesting behavior. Although the malware scan did not identify malicious files, phishing pages often rely on deceptive page content rather than downloadable malware.

Blacklist data was mixed rather than fully clean: major content-focused threat databases in the provided results did not detect a threat, but the domain's IP address is listed on one mail-reputation blocklist. That type of listing is a weaker signal for website content risk on its own, but it adds a small amount of caution when combined with the phishing detections and the page's wallet-transfer theme.

Taken together, the combination of multi-engine phishing flags, the crypto-transfer presentation, and the lack of visible operator transparency suggests this website may pose potential risks to visitors at the time of this scan.

Technical Description

The site is served over HTTPS with a valid TLS certificate issued by Sectigo Limited, expiring on 2026-12-16. It is hosted on Surge infrastructure, with the server IP resolving to DigitalOcean in Frankfurt am Main, Germany. The domain uses Surge nameservers and appears to be deployed as a hosted subdomain rather than a standalone business web property.

DNSSEC is unsigned, which is common but provides no additional DNS integrity protection. No malicious files or flagged external links were identified in the provided page scan, and the page appears to load a small set of static assets plus a JavaScript library for blockchain interactions. The main technical concern is therefore not exploit delivery, but the possibility that the page's functionality and branding may be used in a deceptive manner.

HTTP Redirect Chain
No redirects detected - direct connection to destination
Website Insights
Not Ranked
Tranco Rank
Not in Top 1M
Visitors Unknown
Category: Phishing
Rank History (30 days)
No rank data available
No cookies data available
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step…
To submit your dispute for new-click-app-99.surge.sh, please click the verification link we just emailed you. Once verified, we'll review it within 1-2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?