pointball-llvwkkfsoo[.]edgeone[.]app

PhishDestroy identifies the domain pointball-llvwkkfsoo.edgeone.app as an active fake login phishing site designed to harvest user credentials. The threat remains in operational status and poses an elevated risk to unsuspecting visitors. This domain impersonates a legitimate service to deceive users into entering sensitive information, which is then exfiltrated by the attackers.

This domain was flagged by 15 of 95 VirusTotal vendors, blocked by PhishingDB, and is associated with IP address 43.152.26.58. The SSL certificate, issued by DigiCert, Inc., provides a false sense of legitimacy. Additionally, the domain appears on one security blocklist, indicating prior malicious activity. While the exact creation date is not specified, the combination of detection scores and blocklist presence suggests recent deployment.

Users are strongly advised to avoid interacting with pointball-llvwkkfsoo.edgeone.app. Verify any suspicious links using PhishDestroy’s real-time threat intelligence before accessing them. Organizations should update firewall rules and DNS blocklists to include this domain and its associated IP to prevent accidental exposure. Continuous monitoring for similar domains is recommended due to the evolving nature of credential harvesting attacks.