fbd-holdings[.]net

Analysis of the domain fbd-holdings.net shows a newly created infrastructure used for credential phishing. The domain was registered on May 24, 2026 through Global Domain Group LLC and is hosted on IP address 190.97.166.152, which resolves to a location identified as PA under Cyber Cast International, S.A. The site presents an HTTP 200 response and serves a TLS certificate issued by Let’s Encrypt (R13), indicating a valid encrypted connection. The page title returned by the server is "FBD HOLDINGS," matching the domain name and providing no additional context about the targeted brand. Threat intelligence flags the domain as a high‑risk credential phishing operation; 15 of 91 security vendors on VirusTotal have flagged the host, and it appears on a single public blocklist. The domain is actively blocked by the PhishDestroy mitigation service, and a Gridinsoft trust score of 0 out of 100 further corroborates its malicious reputation. While the exact phishing payload and targeted credentials have not been publicly disclosed, the combination of recent registration, low trust score, and multiple vendor detections suggests a purposeful campaign aimed at harvesting user credentials. Defenders should block outbound connections to 190.97.166.152, add fbd-holdings.net to internal deny lists, and monitor for any authentication attempts to legitimate services originating from this domain. Continuous verification of DNS resolutions and SSL certificate changes is recommended, as the infrastructure could be repointed to additional hosts in future stages of the campaign.