cricketbngl[.]com

cricketbngl.com is currently active and serves a page titled “Football Game”. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IPv4 address 80.69.88.58, which belongs to the TransIP B.V. network in the Netherlands. Authoritative nameservers are ns3.my-ndns.com and ns4.my-ndns.com. The site presents a valid TLS certificate issued by Let’s Encrypt (YR2), and HTTP requests return a 200 status code. VirusTotal records four of ninety‑one scanners flagging the domain, and it is listed on a single external blocklist and has been blocked by the PhishDestroy feed. The classification as generic phishing indicates the site is likely used to lure victims, but the exact brand or credential‑stealing template has not been observed; only the generic page title is known. Defenders should add 80.69.88.58 and cricketbngl.com to DNS and URL filtering policies, monitor for outbound connections to the IP, and enforce TLS inspection to detect any hidden payloads. Continuous re‑scanning with multi‑engine services is advised to capture any evolution of the payload. Because the site is still serving content, rapid containment is recommended.