somosqualidade[.]com[.]br

The domain somosqualidade.com.br was registered on June 04, 2025 and currently resolves to IP 50.116.87.104, an address located in the United States and announced by AS19871 Network Solutions, LLC. The host presents an HTTP 200 response and serves a site built on WordPress with MySQL, PHP, Yoast SEO, and Apache HTTP Server, secured by a Let’s Encrypt certificate (R13). Infrastructure analysis shows the domain is delegated to the name servers ns216.prodns.com.br and ns217.prodns.com.br. Threat intelligence indicates the site is being used for a Facebook brand impersonation campaign classified as social_media, and it is listed on two public phishing blocklists (PhishDestroy and PhishingDB). VirusTotal reports 14 of 95 security vendors flag the domain, and AlienVault OTX has recorded the domain in 15 separate threat pulses. The site’s trust score from Gridinsoft is 0 out of 100, reinforcing its malicious reputation. While the page title "Home - Somos Qualidade" is known, the specific content and any credential‑capture mechanisms have not been publicly disclosed, leaving the exact user‑facing tactics uncertain. Defenders should block the domain and its associated IP at perimeter and DNS layers, monitor for related DNS queries, and add the domain to internal blacklists. Continuous re‑scanning is advised to detect any changes in hosting or payload, and any observed traffic should be logged for forensic correlation with other Facebook‑related phishing incidents.