bonus-saylor[.]com

This domain is flagged as a credential harvesting phishing site with an elevated risk level. Analysis indicates it was designed to impersonate legitimate services, tricking users into submitting login credentials or other sensitive information through fraudulent web forms. The infrastructure and rapid takedown suggest a targeted campaign rather than opportunistic abuse. Infrastructure analysis reveals the domain bonus-saylor.com was registered on July 31, 2025, through MAT BAO CORPORATION. It resolves to the IP address 104.21.26.34 and is currently offline. Security vendors on VirusTotal flagged the domain with 5/95 detections, while it appears on one security blocklist. Trust assessment scores are notably low, with Scamadviser assigning a 25/100 rating and Gridinsoft a 0/100. The page title '404 Not Found' suggests either a placeholder or a temporary state post-compromise. Mitigation against credential harvesting threats requires immediate action from both users and network defenders. Users who accessed this domain should assume credential exposure and reset passwords for any accounts entered on the site, enabling multi-factor authentication where possible. Network defenders should block the domain and its resolving IP (104.21.26.34) at the perimeter, while monitoring for related indicators such as newly registered domains under the same registrar. Security teams should also inspect logs for connections to bonus-saylor.com or its IP, particularly from endpoints that may have interacted with phishing emails or malicious links. Given the domain's recent creation and low trust scores, similar threats may emerge under different names but with comparable infrastructure patterns.