fakebookalerts[.]live

The domain fakebookalerts.live has been identified as a generic phishing site impersonating Sophos, a well-known cybersecurity company, to trick users into revealing credentials or downloading malware. The site was designed to look like a legitimate security awareness training page, making it particularly dangerous for employees and organizations.

Technical analysis reveals that the domain was created on February 21, 2026, and registered through NameCheap, Inc. VirusTotal flagged it with a score of 7 out of 95 security vendors, indicating significant malicious detection. The domain resolves to IP address 54.216.155.46 and uses an SSL certificate issued by Amazon (Amazon RSA 2048 M04). AlienVault OTX includes it in one threat intelligence pulse, and it appears on one security blocklist. Notably, Google Safe Browsing did not flag the site, which may have allowed it to operate longer.

As of the latest check, the domain has been taken offline. However, the threat remains elevated due to potential residual risks, such as cached versions or similar domains still active. PhishDestroy recommends users avoid any interaction with fakebookalerts.live, delete any related emails, and report the incident to their security team. Organizations should reinforce security awareness training to prevent similar phishing attempts.