dozcoinlab[.]com

Analysis of dozcoinlab.com confirms its classification as an active crypto investment scam domain, targeting users with fraudulent hourly profit promises. The domain was registered on February 21, 2026, through Sav.com, LLC, and currently resolves to 173.0.59.2 (AS27323, Wowrack.com, US). Infrastructure analysis reveals nameservers ns1.korrectserver.com and ns2.korrectserver.com, a pattern consistent with previously observed phishing clusters. The site presents itself with the page title 'doz-coinlab.com - Earn Stable Hourly Profits Online!', explicitly advertising unrealistic financial returns, a common tactic in crypto-related scams. The domain is secured with a Let's Encrypt SSL certificate (R13), providing a false sense of legitimacy. MX records point to the domain itself, suggesting potential use for credential harvesting or follow-up phishing emails. Technologies detected include particles.js, Bootstrap, LiteSpeed, and Smartsupp, which may be leveraged for dynamic content delivery or live interaction with victims. The domain appears on one security blocklist (PhishDestroy) and is flagged by 7 of 93 vendors on VirusTotal, indicating moderate detection coverage. Defenders should treat this domain as high-risk and implement blocking measures at DNS, IP, and certificate levels. Given the lack of legitimate business association and the presence of deceptive financial claims, all interactions with this domain should be considered malicious. Further monitoring of associated infrastructure (e.g., korrectserver.com nameservers) may reveal additional related threats.