auth-balancer-dex-eng-us[.]pages[.]dev

The domain auth-balancer-dex-eng-us.pages.dev is currently active and classified as a high‑risk brand‑impersonation site. Infrastructure analysis shows the domain was registered on February 21, 2026 through Cloudflare, Inc. and resolves to IP address 172.66.44.168, which belongs to AS13335 (Cloudflare) and is geolocated in the United States. DNS is served by koa.ns.cloudflare.com and raegan.ns.cloudflare.com, and the site presents a valid SSL certificate issued by Google Trust Services under the WE1 root, with HSTS and HTTP/3 enabled. Security telemetry indicates that one of ninety‑three VirusTotal scanners flagged the domain, and it is listed on a security blocklist. Additional defensive sources have blocked the domain, including MetaMask, PhishDestroy, and SEAL. Reputation metrics are poor, with a Gridinsoft trust score of 0/100 and a Scamadviser score of 41/100. The page title returned by the server is "Balancer DEX — Decentralized Exchange & Liquidity Protocol," suggesting an attempt to mimic a decentralized finance service, but no further content analysis is available. Given the confirmed impersonation flag, the high risk rating, and the presence of multiple blocking actions, security teams should add the domain to network and endpoint blocklists, monitor for any related traffic, and advise users to avoid any interaction with the site. Continuous re‑evaluation is recommended as additional threat intelligence becomes available.