register-saharaai[.]com

The domain register-saharaai.com has been identified as a confirmed phishing site specializing in fraudulent crypto community proposal schemes. Analysis indicates this infrastructure was designed to impersonate legitimate decentralized autonomous organization (DAO) proposal platforms, likely targeting cryptocurrency holders with fake governance participation opportunities. The domain is currently offline, though historical activity suggests it was actively used for credential harvesting and wallet compromise attempts. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on June 09, 2026, with resolution to IP address 188.114.96.3. Security vendors have flagged this domain in 3 of 95 VirusTotal assessments, while appearing on 3 independent security blocklists. Additional technical indicators include a Gridinsoft trust score of 0/100, detection in 2 AlienVault OTX threat intelligence pulses, and blocking by multiple wallet security providers. The site employed Cloudflare protection with HTTP/3 protocol and used a Google Trust Services SSL certificate, creating a false appearance of legitimacy. Current status shows the domain has been taken offline, though the underlying infrastructure remains a potential threat vector. Organizations and individuals are advised to implement immediate protective measures, including: (1) Blocking the domain and associated IP address at firewall and DNS levels; (2) Adding detection rules for the domain pattern in security monitoring systems; (3) Verifying all cryptocurrency governance participation through official project channels only; (4) Conducting retrospective analysis of network logs for connections to 188.114.96.3 between June 2026 and takedown date; (5) Educating users about the specific threat pattern of fake community proposal sites, particularly those using Cloudflare-protected infrastructure with recent registration dates.