wazoogang[.]xyz

This domain is flagged as an elevated-risk fake bot verification scam designed to deceive users into disclosing sensitive information or executing unauthorized actions. Analysis indicates the site employs social engineering tactics, presenting a fraudulent "Bot Verification" prompt to mimic legitimate security checks, a common technique in credential harvesting and malware distribution campaigns. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain wazoogang.xyz was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious domains. It resolves to the IP address 104.21.35.72, hosted on Cloudflare’s network (AS13335), which is often leveraged to obfuscate origin servers. The domain appears on two security blocklists and is actively blocked by PhishDestroy and ScamSniffer. Its SSL certificate, issued by Google Trust Services (WE1), provides minimal trust assurance, as fraudulent sites commonly exploit free or automated certificate issuance. VirusTotal detection metrics show 18 out of 95 security vendors flagging the domain as malicious, with classifications including phishing and social engineering threats. Mitigation requires immediate user awareness and technical controls. Users should avoid interacting with any prompts from wazoogang.xyz, particularly those requesting account credentials, personal data, or device permissions. Network-level protections, such as DNS filtering or firewall rules blocking the domain and its resolving IP (104.21.35.72), should be implemented. Organizations are advised to monitor for related indicators, including the registrar (NiceNIC) and certificate issuer (Google Trust Services WE1), as these may appear in other malicious infrastructure. If exposure is suspected, credentials should be rotated, and systems scanned for unauthorized access or malware.