ballmun-sports2-w6sjxzxo6e[.]edgeone[.]app

This domain, ballmun-sports2-w6sjxzxo6e.edgeone.app, is currently flagged as a generic phishing site under investigation. The web service returns HTTP 200 and presents the page title “Football Live App - Premium Dark Gold (Telegram Fixed)”, indicating a possible lure targeting sports‑related users. The site was registered on 2026‑03‑01 through MarkMonitor, Inc., and the DNS zone is served by ns3.dnsv4.com and ns4.dnsv4.com. The host resolves to 43.152.26.58, an address located in Germany and announced by AS139341 (ACE). The SSL certificate is a DigiCert Secure Site OV G2 TLS RSA‑4096 SHA‑256 issued in 2022, providing strong encryption but not mitigating malicious intent. Gridinsoft assigns a trust score of 0 / 100, reflecting a high‑risk profile. The page loads Tailwind CSS, Unpkg, and jsDelivr assets, a common stack for fast‑loading malicious pages. VirusTotal currently reports 0 / 95 detections, meaning the URL has not yet been flagged by the scanners incorporated in that service. However, the domain appears on the PhishDestroy blocklist and is listed on one additional security blocklist, confirming that external monitoring entities have observed abusive activity. No public analysis of the page content is available, so the exact phishing vector remains unknown. Given the combination of a fresh registration, low trust score, active blocklisting, and a page title that suggests a sports‑related lure, defenders should treat the domain as malicious until further evidence proves otherwise. Recommended actions include adding the domain to outbound and inbound deny lists, monitoring DNS queries for the associated nameservers, and inspecting traffic to 43.152.26.58 for suspicious payloads. Continuous re‑evaluation is advised as additional intelligence, such as sandbox reports or user‑submitted samples, becomes available.