saharaai[.]co

This domain, saharaai.co, was flagged on July 22, 2026, for wallet/seed phishing, specifically targeting users of the MetaMask cryptocurrency wallet. The domain was created on February 21, 2026, and has since been taken offline. Analysis indicates that the site was part of an airdrop scam, a common tactic used to lure cryptocurrency users into divulging sensitive information such as wallet seeds or private keys. The domain resolves to the IP address 45.141.233.102, which is located in Poland and is associated with AS201814 MEVSPACE sp.

z o.o. The website's page title, 'Sahara AI: OKX Airdrop,' suggests that it may have been designed to appear legitimate by leveraging the names of known cryptocurrency platforms. The domain appears on two security blocklists, PhishDestroy and ScamSniffer, indicating a level of certainty among security professionals regarding its malicious intent. The SSL certificate used by the site is labeled R11, which may have been a low-cost or self-signed certificate, common in phishing operations.

The Gridinsoft trust score for this domain is 0 out of 100, reflecting a complete lack of trust. While the domain is currently offline, defenders should remain vigilant, as phishing sites often reappear under different domain names or return after short periods of inactivity. It is recommended to monitor for any resurgence of this domain and to educate users about the risks of airdrop scams and the importance of verifying the authenticity of websites before entering any sensitive information.