sarhas[.]net

Analysis of sarhas.net indicates an active phishing domain registered on July 14, 2026, through Fewmoretaps OU operating as Trustname.com. The domain remains unresolved in public threat feeds, with no detections reported by 95 security vendors on VirusTotal as of the latest scan. This absence of flags does not confirm safety, particularly given the domain's inclusion on one security blocklist and its active blocking by PhishDestroy. Infrastructure review reveals the domain is hosted on IP address 81.162.54.98 and utilizes nameservers ares.trustname.com, ns1.anycastdns.cz, ns2.anycastdns.cz, and zeus.trustname.com, suggesting reliance on a shared or reseller hosting model commonly exploited for phishing operations. The registration age of six days aligns with typical phishing domain lifecycles, where rapid deployment and short operational windows are standard. No specific brand impersonation, phishing kit, or page content has been confirmed in available data, leaving the exact target or scam type undetermined. Defenders should treat sarhas.net as suspicious based on hosting patterns, recent registration, and blocklist presence, despite the current lack of vendor detections. Monitoring for changes in resolution, SSL certificates, or HTTP responses is recommended, along with cross-referencing with additional threat intelligence sources to assess evolving risk. Automated blocking at the DNS or proxy level may be warranted pending further analysis.