knowledgedrop[.]saharaai[.]click

The domain knowledgedrop.saharaai.click is a generic phishing site targeting cryptocurrency users with a fraudulent airdrop claim page. It poses an elevated risk as a cryptocurrency scam, presenting itself as a '$SAHARA Airdrop Checker and Token Claim' to deceive victims into disclosing wallet credentials or transferring funds. No legitimate brand is impersonated, and no drainer kit was identified. The site is currently taken offline.

Technical indicators show knowledgedrop.saharaai.click was flagged by 1 of 95 VirusTotal security vendors, including G-Data. It appears on 2 security blocklists (PhishDestroy and ScamSniffer) but is not flagged by Google Safe Browsing. The domain was created on February 21, 2026, and resolves to IP address 172.67.204.173, hosted on Cloudflare's network (AS13335) in the US. The SSL certificate is issued by WE1, and the observed page title is '$SAHARA Airdrop Checker and Token Claim'. Gridinsoft assigns a trust score of 0/100 to this domain.

Users who interacted with knowledgedrop.saharaai.click should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. Enable two-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions. Report the phishing domain to platforms like PhishTank, Google Safe Browsing, or local cybercrime authorities to aid in takedown efforts.