dubaicoin[.]ai

The domain dubaicoin.ai was registered on 21 February 2026 through NameCheap, Inc. and is delegated to the parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. DNS resolution returns the address 92.113.23.92, which belongs to AS47583 Hostinger International Limited and is geolocated in Germany. The site presents a valid TLS certificate issued by Let’s Encrypt (R13). Network probes indicate an HTTP 200 response and the use of HTTP/3. Service fingerprinting reveals a PHP back‑end, jQuery on the front‑end, and delivery via a Hostinger CDN. VirusTotal records show that 2 of 95 security scanners have flagged the domain, while Gridinsoft assigns a trust score of 0 out of 100. The site is listed on one public blocklist and is actively blocked by PhishDestroy. The displayed page title reads “Dubai Coin DBX”, matching a known crypto‑drainer lure that targets users of digital asset platforms. The combination of a legitimate‑looking TLS certificate, a recent registration date, and a high‑risk classification aligns with the generic_phishing threat type, specifically a crypto drainer campaign. The presence of MX records pointing to mx1.hostinger.com (priority 5) and mx2.hostinger.com (priority 10) suggests the operators have configured email services to support credential harvesting. Defenders should add 92.113.23.92 and the domain dubaicoin.ai to network‑level deny lists, monitor TLS certificate changes, and enforce email filtering for the identified Hostinger mail exchangers. Continuous re‑scanning with multiple anti‑malware engines is advised, given the low trust score and the limited VirusTotal detection. Incident response teams should treat any credential or private‑key submissions associated with the site as compromised.