incubalab[.]com[.]mx

Analysis of incubalab.com.mx indicates a confirmed phishing domain actively engaged in social engineering campaigns. Registered on February 17, 2020, through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain remains operational as of July 19, 2026, resolving to IP address 162.241.60.240. Google Safe Browsing explicitly flags this domain under the SOCIAL_ENGINEERING category, confirming its use in deceptive practices designed to manipulate users into disclosing sensitive information or performing harmful actions. Infrastructure review shows the domain has maintained consistent hosting, with no recent changes in registration or resolution patterns that would suggest takedown or remediation efforts. Three of 95 security vendors on VirusTotal have detected malicious activity associated with this domain, though the exact nature of the payload or lure remains unconfirmed due to limited public telemetry. No specific brand impersonation, phishing kit, or targeted sector has been attributed to this domain in available intelligence. Defenders should treat incubalab.com.mx as a high-risk indicator. Network-level blocking is recommended, along with monitoring for any connections or DNS queries originating from internal systems. Given the domain's age and persistent active status, further investigation into associated infrastructure (e.g., IP reputation, neighboring domains) may reveal additional compromised or malicious assets. No evidence currently suggests this domain is part of a broader campaign, but its continued operation warrants heightened scrutiny.