sg04web[.]us

The domain sg04web.us was registered through NameSilo, LLC on December 30, 2025 and is currently listed as offline. DNS resolution points to the IPv4 address 185.244.151.88, which belongs to AS60117 Host Sailor Ltd located in Romania. The authoritative nameservers are ns3.ro.hostsailor.com and ns4.ro.hostsailor.com, confirming the hosting association with Host Sailor. No SSL certificate is present for the domain, indicating that any traffic would be delivered over clear‑text HTTP. A simple HTTP request returns the page title "Index of /," suggesting that the web server is exposing a directory index rather than a typical landing page.

VirusTotal analysis shows that three out of ninety‑three security vendors flagged the domain, providing limited but notable detection consensus. The domain is present on a single security blocklist and has been explicitly blocked by the PhishDestroy service. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The only concrete indicator of malicious intent is the classification as a generic phishing site, supported by the blocklist entries and the low trust score.

However, the exact phishing payload, target brand, or credential‑harvesting mechanism has not been observed; the site’s content beyond the directory index remains unanalyzed. Defenders should continue to deny any network connections to 185.244.151.88, add sg04web.us to domain‑level blocklists, and monitor for any resurrection of the domain or related hostnames under the same nameserver set. Because the site lacks HTTPS, any future activation would be visible in clear‑text traffic, allowing additional inspection. Ongoing vigilance is advised to capture any evolving infrastructure that may reuse the same IP range or hosting provider.