michaelsaylor25[.]com

Analysis as of July 24, 2026 shows that michaelsaylor25.com is a newly registered domain (creation date September 08, 2025) hosted behind Cloudflare's network (AS13335, IP 172.67.202.99, United States). The domain was registered through Web Commerce Communications Limited and uses Cloudflare nameservers (byron.ns.cloudflare.com, pam.ns.cloudflare.com). The site presents a page title identical to the domain name, "michaelsaylor25.com," and serves HTTPS certificates issued by Google Trust Services under the WE1 label. HTTP requests return a 403 status, indicating that direct access is currently denied or restricted.

Threat intelligence indicates that 10 of 93 security vendors on VirusTotal have flagged the domain, suggesting malicious behavior, and the domain is listed on at least one public blocklist. Independent security tooling (Gridinsoft) assigns a trust score of 0 out of 100, and the domain is actively blocked by the PhishDestroy service. These data points collectively align with the classification of a generic phishing infrastructure.

However, the specific content or payload hosted on the site remains unverified beyond the page title, and no detailed landing page or credential‑harvesting form has been captured. Defenders should immediately add michaelsaylor25.com to perimeter blocklists, enforce DNS sinkholing where possible, and monitor outbound traffic for connections to the associated Cloudflare IP. Continuous re‑evaluation is advised, as the 403 response may be altered to expose a phishing page in the future.