vozanosports[.]com

This domain is flagged as an elevated-risk brand impersonation threat specifically targeting Facebook users. Analysis indicates the infrastructure was designed to deceive victims into believing they are interacting with a legitimate Facebook login portal, likely to facilitate credential theft or account takeover attempts. The domain exhibits multiple high-risk indicators that align with known impersonation campaigns. Infrastructure analysis reveals vozanosports.com was registered on December 11, 2024, through Metaregistrar BV and resolves to IP address 72.167.34.242 (AS26496, GoDaddy.com, LLC, US). The domain currently holds no SSL certificate and is detected by 20 out of 95 security vendors on VirusTotal. It appears on one security blocklist and is actively blocked by enterprise threat intelligence feeds. The page title, 'Vozano Sports International,' does not match the impersonated brand, suggesting an attempt to obfuscate malicious intent while maintaining a facade of legitimacy. To mitigate risks associated with this brand impersonation threat, users should avoid interacting with the domain entirely. Organizations should implement DNS-based blocking for vozanosports.com and its resolving IP (72.167.34.242) at the network perimeter. Security teams are advised to monitor for authentication attempts originating from this infrastructure, particularly those targeting Facebook credentials. End-users who may have entered login details on this site should immediately reset their passwords via Facebook's official platform and enable multi-factor authentication. Given the domain's recent creation date and lack of legitimate history, it should be treated as hostile infrastructure until further evidence proves otherwise.