# drop-saharaai.xyz — MALICIOUS

> Discover why drop-saharaai.xyz is flagged as a medium-risk phishing domain. Learn about its status and what actions to take.

## Summary
PhishDestroy identifies drop-saharaai.xyz as an active generic phishing domain posing a medium risk. Phishing sites like this trick users into revealing sensitive info, impacting security.

The domain was registered on February 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 188.114.96.3. It appears on two security blocklists and is flagged by 5 out of 95 VirusTotal vendors, indicating suspicious activity.

Users should avoid interacting with drop-saharaai.xyz, refrain from sharing personal data, and use updated security tools to block access. Staying vigilant helps prevent credential theft and other phishing-related harm.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-03-06 15:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["adam.ns.cloudflare.com", "danica.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Gridinsoft"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc366-b636-713e-ab0e-2b48c517e80c.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/drop-saharaai.xyz
- Wayback Machine: https://web.archive.org/web/https://drop-saharaai.xyz
- PhishDestroy: https://phishdestroy.io/domain/drop-saharaai.xyz/
- LLM endpoint: https://phishdestroy.io/domain/drop-saharaai.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/drop-saharaai.xyz/
Last updated: 2026-03-19