saharalabsai[.]com

PhishDestroy identifies saharalabsai.com as a generic phishing domain actively propagating tech support scams. The domain mimics legitimate AI or lab service branding without association to any well-known entity, suggesting a hastily constructed lure. No drainer kit artifacts or JavaScript payloads were observed in initial sandbox analysis, indicating a low-complexity operation likely relying on social engineering and urgency-based prompts. This domain was flagged for generic phishing and resolves to IP 188.114.96.3. It carries a VirusTotal detection score of 3/95, remains unlisted on Google Safe Browsing (GSB), and is registered through Global Domain Group LLC. The domain was created on April 27, 2026 — an unusually recent registration date that correlates with the onset of scam campaigns. As of now, it appears on zero public blocklists, indicating a newly emerged threat with minimal community exposure. Currently active and unresolved, saharalabsai.com poses a moderate risk due to delayed detection and absence of signature-based warnings. Immediate mitigation should involve network-level blocking of IP 188.114.96.3 and domain registration. Users should refrain from interacting with the site and report any encounters to CERT teams. Remaining risk is classified as under investigation, with potential escalation to high severity pending further behavioral analysis and sandbox detonation results.