hokbe[.]alltallentchampionship[.]com

The domain hokbe.alltallentchampionship.com is identified as a brand impersonation threat specifically targeting Facebook. Analysis of its infrastructure reveals it was designed to mimic legitimate Facebook login pages, likely to harvest credentials or distribute malicious payloads. The domain is currently offline, though prior activity suggests it was actively used in phishing operations. Technical indicators confirm the domain's malicious nature. It is flagged by 17 of 95 security vendors on VirusTotal, with detections including phishing and fraudulent activity. The domain was registered on November 22, 2025, through Aceville Pte. Ltd., and resolves to the IPv6 address 2606:4700:3033::6815:3dcf, hosted on Cloudflare's network (AS13335). It appears on two security blocklists, including PhishDestroy and PhishingDB. Notably, the page title, 'PUBG MOBILE - Midasbuy,' is inconsistent with Facebook branding, further indicating deceptive intent. The domain lacks an SSL certificate, a common red flag for fraudulent sites. Current status shows the domain as taken offline, though its infrastructure remains a potential risk. Organizations and users are advised to block the domain at the network level and monitor for related indicators of compromise. Security teams should review logs for connections to the resolved IP address and investigate any credential submissions tied to this domain. Given the elevated risk level, users who may have interacted with the site should reset passwords and enable multi-factor authentication on affected accounts.