Surge AI looks like a legitimate data annotation company that's been around for several years and has earned references from sources like Wikidata and Hacker News. The main reason for caution is that the owner is hidden behind a privacy service, which is slightly at odds with how an enterprise AI vendor typically presents itself. For what it is — a B2B services site — there's no strong signal of deception, just room for greater openness.
Cross-referenced 43 live signals from Google Safe Browsing, VirusTotal, WHOIS and more on Oct 28, 2026.How we score →
Where the score comes from
We look at six areas. Here's how surgehq.ai did in each.
85
Security
The site uses modern encryption (TLS 1.3) with a valid certificate from a trusted issuer, sets browser protections against clickjacking, and is served through Cloudflare. No malware or phishing flags from Google Web Risk, and the domain hasn't been blacklisted for malicious activity. This is a strong security posture for any website.
60
Identity
The domain is six years old and registered through a major registrar, which is consistent with a legitimate operation. However, the owner is hidden behind a privacy service — normal for many sites, but for a business that presents itself as an AI company serving enterprise clients, it would be stronger to see a named company.
80
Reputation
The domain has a clean history across major threat feeds and blacklists, and it appears in the Wayback Machine as far back as 2020, confirming a persistent online presence. Hacker News readers have upvoted links to the site across multiple years, and Wikidata lists it as the official site for a known data annotation company. That's a solid external validation.
75
Transparency
The site provides an about page, contact link, and links to social media profiles on X and LinkedIn. The homepage clearly describes the company's mission and offerings. For a B2B AI services company, the transparency is above average but not exceptional — the team behind Surge AI is not individually named, which would add credibility.
70
Compliance
The site has a privacy policy, terms of service, and a cookie settings link, covering the basics for a commercial site. It does not display a dedicated legal entity disclosure page, which is expected in EU markets and would be a minor gap if they serve European customers. The policies appear standard for a US-based company.
75
Infrastructure
DNS is configured with multiple name servers, email uses Google's infrastructure (reliable), and the domain enforces email authentication so unverified mail gets quarantined. DNSSEC is not enabled, which is a missed security measure, but not unusual for sites that aren't handling high-risk transactions directly.
What we checked
The 43 signals behind this report.
Security & Transport
Certificate Issuer: Neutral
Google Trust Services
Certificate issued by Google Trust Services
Clickjacking Protection: Good
Present
X-Frame-Options: SAMEORIGIN
Content Security Policy: Good
Present
Site has Content Security Policy configured
Google Web Risk: Good
Clean
No threats detected by Google Web Risk
Protective DNS: Neutral
Not blocked
Cloudflare's malware-blocking resolver (1.1.1.2) answered normally for this domain. These resolvers refuse domains their threat intelligence lists for malware or phishing, and a scam only days old often isn't listed yet. Quad9 gave no usable answer.
SSL Certificate: Good
Valid
Valid certificate, expires in 65 days
Search Cloaking: Neutral
Not detected
Neither a visitor arriving from a Google search nor Google's crawler was sent elsewhere or shown spam that a direct visit wasn't. Cloaking that checks the visitor's network address can't be seen from our server.
Security Headers: Neutral
2 of 6
Site sets some security response headers: CSP, X-Frame-Options
Server: Neutral
cloudflare
Web server: cloudflare
TLS Version: Good
TLS 1.3
Connection uses TLS 1.3
Identity & WHOIS
About Page: Good
Found
Site publishes an About / Team / Company page — a transparency signal that the operator is willing to describe who runs the business.
Branding: Good
Complete
Site has custom branding and social media metadata
Business Disclosure: Neutral
Not found
No dedicated legal-entity disclosure page detected — common and expected outside the EU, but required for commercial sites in Germany, France, Spain, Italy, and other EU jurisdictions.
Contact Info: Good
Found
Homepage has a contact page link
Domain Age: Good
6 years, 4 months
Domain created 2020-06-02 (6 years, 4 months ago)
Domain Expiry: Neutral
2028-06-02
Expires in 582 days
Legal Pages: Good
Privacy & Terms found
Website has both privacy policy and terms of service pages
Registrant: Neutral
Privacy protected
The registration shows a privacy service or redaction notice in place of the owner. Most registrars do this by default since GDPR (2018), for companies as well as individuals, so it hides nothing unusual.
Registrar: Neutral
NameCheap, Inc.
Registered through NameCheap, Inc.
Infrastructure & DNS
CDN: Good
Cloudflare
Site is served behind Cloudflare — indicates real operational investment in edge infrastructure
DMARC Record: Good
p=quarantine
Domain enforces DMARC — unauthenticated mail is quarantined
DNS Blacklists: Neutral
Clean
Not listed by SpamCop and Barracuda, the blacklists that answered
DNS Resolution: Good
1 IP(s)
Resolves to: 198.202.211.1
DNSSEC: Neutral
Not enabled
Domain is not signed with DNSSEC
DNSSEC: Neutral
unsigned
DNSSEC status from WHOIS
Email (MX Records): Good
1 record(s)
Mail servers: smtp.google.com.
Hosting Network (ASN): Neutral
AS209242 CLOUDFLARESPECTRUM Cloudflare, Inc.
Hosted on: AS209242 CLOUDFLARESPECTRUM Cloudflare, Inc. (US)
Name Servers: Neutral
3 server(s)
DNS providers: blue.foundationdns.com., blue.foundationdns.net., blue.foundationdns.org.
Page Load Time: Neutral
116ms
Fast page load, timed once from our server in Europe including the DNS lookup, connection setup and any redirects
Reputation & Reach
Hacker News: Good
78 stories since 2021
Hacker News readers upvoted links to this site in 5 different years between 2021 and 2026. The most upvoted, "Three areas where Google Search lags behind competitors: code, cooking, travel" (2022), got 527 points.
Open Graph Type: Neutral
website
og:type declared as website
Page Description: Neutral
Our mission is to raise AGI with the richness of human intelligence — curious, witty, imaginative, and full of unexpecte...
Our mission is to raise AGI with the richness of human intelligence — curious, witty, imaginative, and full of unexpected brilliance.
Page Language: Neutral
en
HTML declares lang="en"
Page Title: Neutral
Surge AI | Human Intelligence for AGI
Schema Name: Neutral
Surge AI
Sitemap: Good
97 pages
Site maintains a proper sitemap with 97 indexed pages
Social Media Presence: Good
2 platforms
Homepage links to profiles on X, LinkedIn
Structured Data: Good
Found
Site uses structured data identifying itself as: Organization, WebSite
Tranco Rank: Neutral
Rank #231414
This site appears in the top 1 million websites
Web Archive History: Good
5 years
Earliest archive snapshot from 20201030
Website Status: Good
Online
Website is live and responding
Wikidata Entry: Good
Surge AI — American multinational data annotation company
Wikidata, the knowledge base behind Wikipedia, lists this site as the item's official website, and 1 Wikipedia or sister-project article cover it.
robots.txt: Good
Present
robots.txt has 5 directives and references a sitemap
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Surgehq.ai is the website for Surge AI, a company that provides human data annotation services to train large language models. If you're wondering whether Surge AI is a legitimate business, the evidence leans positive: the domain has been registered since 2020, it shows up consistently in web archives, and it's listed as the official website in Wikidata, the same database powering Wikipedia infoboxes. That kind of external reference is hard to fake.
There's no sign the site has been used for scams or malware. Security headers and encryption are well-configured. The missing piece is the owner's identity — the domain uses a privacy service, which means you can't easily verify who runs it. For a vendor you might trust with proprietary training data or model evaluation, that's worth noting. But the company also maintains LinkedIn and X profiles, and Hacker News readers have shared its content across several years.
If you're considering working with Surge AI for a project, the red flags are minimal. A straightforward next step would be to check their LinkedIn activity and ask for references directly — standard due diligence for this kind of service. Based on the signals available, is Surgehq.ai a scam? It almost certainly is not. The site appears to be what it claims: a legitimate business operating in the AI data space.