fibercom-laboratory[.]com

Analysis of fibercom-laboratory.com shows an active credential‑phishing infrastructure. The site returns HTTP 200 and presents the page title “Identifiez‑vous”, indicating a login‑prompt style page. Technical fingerprinting reveals a stack built on Apache HTTP Server behind Cloudflare, with front‑end libraries including Bootstrap, jQuery, Popper and resources from Google Hosted Libraries and cdnjs. The domain resolves to 64.92.112.85, an address owned by AS21777 Massive Networks, Inc. in the United States, and is served over a valid Let’s Encrypt certificate (R12). DNS configuration lists four name servers (dns1.validns.com, dns2.validns.com, ns41.imagelinkusa.net, ns42.imagelinkusa.net) and an MX record that points to the same domain, a pattern often used to increase deliverability of phishing emails. The domain is listed on PhishDestroy and PhishingDB, and Google Safe Browsing flags it for social engineering. VirusTotal reports 22 of 94 scanners flagging the host, while Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. Registration was performed through Register.com – Network Solutions, LLC on 13 February 2000, suggesting reuse of long‑standing infrastructure. Current evidence confirms the site is still active and classified as high‑risk. Defenders should block the domain and its associated IP, monitor DNS changes, and consider email filtering rules for messages originating from the domain’s MX. Further investigation is needed to capture the exact credential‑capture page content, as the page’s visual layout has not been publicly disclosed.