saibovip144[.]cc

This domain saibovip144.cc is flagged as a high-risk generic phishing threat and remains active as of July 12, 2026. The domain was registered on June 12, 2026, through DYNADOT LLC, a registrar commonly associated with low-effort or disposable domain registrations. It resolves to IP address 20.187.146.25, which hosts the site. The page title is '验证' (Chinese for 'verification'), suggesting the phishing page may present a verification-themed prompt to harvest credentials or sensitive information. The domain uses a Let's Encrypt SSL certificate, which provides HTTPS encryption but does not indicate legitimacy. Infrastructure analysis reveals the site employs jQuery UI, jQuery CDN, and jQuery libraries, which are common web development frameworks and do not inherently indicate malicious intent. The domain has a Gridinsoft trust score of 0 out of 100, reflecting strong suspicion. VirusTotal data shows 18 out of 95 security vendors flagging the domain as malicious, and it appears on 2 security blocklists. It is blocked by PhishDestroy and BLP-Malware. AlienVault OTX indicates the domain is referenced in 17 threat intelligence pulses, suggesting active tracking by multiple security researchers. Defenders should add this domain to blocklists and monitor for related domains or IPs. The exact content of the phishing page has not been fully analysed, but the title indicates a verification page, likely targeting user credentials. Uncertainties include the specific brand or service being impersonated, as no brand target is provided. Defenders should treat all traffic to this domain as potentially compromised and investigate any credentials submitted to it. No additional threat indicators such as ASN, country, or phishing kit details are available in the current intelligence.