# Phishing sites impersonating Balancer PhishDestroy has recorded 72 phishing domains impersonating Balancer since 2025-09-19, 2 of them in the last 30 days. The most used registrars are Cloudflare and Dynadot; the most common TLDs are .dev and .com. Open Balancer only from its official app or a saved bookmark. 72Domains, all time 2Last 30 days 43Online at last check 12Confirmed takedowns ## New domains in the last 90 days Balancer phishing domains detected per day: 5 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Balancer site Words most often added to the brand in reported domains: defi, revoke, refunds, protocol, finance, dex, chainlink, auth, balancers, eng. - Type the address yourself or use a bookmark; phishing links for Balancer arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Balancer will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Balancer phishing domains The 50 most recently detected domains impersonating Balancer Domain | First detected | Status at last check | Registrar | [balancer-evm.com](https://phishdestroy.io/domain/balancer-evm.com/) | 2026-10-21 | Online | NICENIC | [rylqavouspenx.com](https://phishdestroy.io/domain/rylqavouspenx.com/) | 2026-10-07 | Online | NICENIC | [aura-migrator.pages.dev](https://phishdestroy.io/domain/aura-migrator.pages.dev/) | 2026-09-07 | Online | Cloudflare Pages | [www-balancer.fi](https://phishdestroy.io/domain/www-balancer.fi/) | 2026-09-02 | Online | Xonet | [cipherixpeak.com](https://phishdestroy.io/domain/cipherixpeak.com/) | 2026-07-30 | Online | Ultahost | [balancer-chainlink.com](https://phishdestroy.io/domain/balancer-chainlink.com/) | 2026-07-04 | Online | NICENIC | [balancer.to](https://phishdestroy.io/domain/balancer.to/) | 2026-06-29 | Online | Government of Kingdom of Tonga | [yfibalancer-chainlink.com](https://phishdestroy.io/domain/yfibalancer-chainlink.com/) | 2026-06-28 | Online | NICENIC | [balancer-chainlink.net](https://phishdestroy.io/domain/balancer-chainlink.net/) | 2026-06-28 | Online | NICENIC | [shivlpf.shop](https://phishdestroy.io/domain/shivlpf.shop/) | 2026-06-22 | Online | Dynadot | [balancer-chainlink.org](https://phishdestroy.io/domain/balancer-chainlink.org/) | 2026-06-22 | Online | Key-Systems | [faqs-eng-balncer-fiance.pages.dev](https://phishdestroy.io/domain/faqs-eng-balncer-fiance.pages.dev/) | 2026-06-15 | Online | Cloudflare Pages | [balancer-v2.com](https://phishdestroy.io/domain/balancer-v2.com/) | 2026-05-03 | Unknown | NICENIC | [balaancer-dex-us.pages.dev](https://phishdestroy.io/domain/balaancer-dex-us.pages.dev/) | 2026-05-01 | Online | Cloudflare | [deefi--balancer-access.pages.dev](https://phishdestroy.io/domain/deefi--balancer-access.pages.dev/) | 2026-05-01 | Online | Cloudflare | [secure-us-balaner-portcol.pages.dev](https://phishdestroy.io/domain/secure-us-balaner-portcol.pages.dev/) | 2026-05-01 | Taken down | Cloudflare | [us-balancer-protocol.pages.dev](https://phishdestroy.io/domain/us-balancer-protocol.pages.dev/) | 2026-04-29 | Online | Cloudflare | [balancer-defi-liquidity-pools.org](https://phishdestroy.io/domain/balancer-defi-liquidity-pools.org/) | 2026-04-21 | Unknown | NICENIC | [balancer-dx.pages.dev](https://phishdestroy.io/domain/balancer-dx.pages.dev/) | 2026-04-20 | Offline | Cloudflare | [get-explored-balancer-defi.pages.dev](https://phishdestroy.io/domain/get-explored-balancer-defi.pages.dev/) | 2026-04-19 | Online | Cloudflare | [starteed-balancer-protocol.pages.dev](https://phishdestroy.io/domain/starteed-balancer-protocol.pages.dev/) | 2026-04-19 | Online | Cloudflare | [torzon-2026.com](https://phishdestroy.io/domain/torzon-2026.com/) | 2026-04-17 | Taken down | NameCheap | [en-balancer-protocol-in.pages.dev](https://phishdestroy.io/domain/en-balancer-protocol-in.pages.dev/) | 2026-04-12 | Online | Cloudflare | [secure-dex-balanccer.pages.dev](https://phishdestroy.io/domain/secure-dex-balanccer.pages.dev/) | 2026-04-09 | Offline | Cloudflare | [auth-balancr-defi-en-us.pages.dev](https://phishdestroy.io/domain/auth-balancr-defi-en-us.pages.dev/) | 2026-04-09 | Online | Cloudflare | [guide-balancer-defii.pages.dev](https://phishdestroy.io/domain/guide-balancer-defii.pages.dev/) | 2026-04-09 | Online | Cloudflare | [frontend-v2-7h9.pages.dev](https://phishdestroy.io/domain/frontend-v2-7h9.pages.dev/) | 2026-04-07 | Online | Cloudflare | [faqs-us-blncer-defi.pages.dev](https://phishdestroy.io/domain/faqs-us-blncer-defi.pages.dev/) | 2026-04-04 | Online | Cloudflare | [connect-auth-balncer-fiance.pages.dev](https://phishdestroy.io/domain/connect-auth-balncer-fiance.pages.dev/) | 2026-04-04 | Online | Cloudflare | [guide-balancer-protocol.pages.dev](https://phishdestroy.io/domain/guide-balancer-protocol.pages.dev/) | 2026-04-04 | Online | Cloudflare | [hfh-43j.pages.dev](https://phishdestroy.io/domain/hfh-43j.pages.dev/) | 2026-03-22 | Offline | Cloudflare | [event-balancer.xyz](https://phishdestroy.io/domain/event-balancer.xyz/) | 2026-03-14 | Online | Dynadot | [balancer-v3.org](https://phishdestroy.io/domain/balancer-v3.org/) | 2026-03-05 | Unknown | NiceNIC | [tokenrebalancer.com](https://phishdestroy.io/domain/tokenrebalancer.com/) | 2026-03-02 | Online | Cloudflare | [balancer-us-finance.pages.dev](https://phishdestroy.io/domain/balancer-us-finance.pages.dev/) | 2026-02-26 | Online | Cloudflare | [balancerfi.airlst-pages.app](https://phishdestroy.io/domain/balancerfi.airlst-pages.app/) | 2026-02-26 | Taken down | united-domains | [balancer-defi-io-us.pages.dev](https://phishdestroy.io/domain/balancer-defi-io-us.pages.dev/) | 2026-02-26 | Online | Cloudflare | [account-defi-balencerr.pages.dev](https://phishdestroy.io/domain/account-defi-balencerr.pages.dev/) | 2026-02-26 | Taken down | Cloudflare | [docs-v2-balancer-fi.typedream.app](https://phishdestroy.io/domain/docs-v2-balancer-fi.typedream.app/) | 2026-02-26 | Taken down | Squarespace Domains II | [balance-dex.pro](https://phishdestroy.io/domain/balance-dex.pro/) | 2026-02-26 | Offline | Web Commerce Communications dba WebNic.c | [balancer-fi.org](https://phishdestroy.io/domain/balancer-fi.org/) | 2026-02-26 | Offline | Web Commerce Communications dba WebNic.c | [balancer.defi-amm.cc](https://phishdestroy.io/domain/balancer.defi-amm.cc/) | 2026-02-26 | Taken down | NiceNIC | [auth-balancer-dex-eng-us.pages.dev](https://phishdestroy.io/domain/auth-balancer-dex-eng-us.pages.dev/) | 2026-02-26 | Online | Cloudflare | [baiancer.fi-v3.net](https://phishdestroy.io/domain/baiancer.fi-v3.net/) | 2026-02-26 | Taken down | NiceNIC | [acces-balancerr-finance.pages.dev](https://phishdestroy.io/domain/acces-balancerr-finance.pages.dev/) | 2026-02-26 | Taken down | Cloudflare | [chainbase-web.pages.dev](https://phishdestroy.io/domain/chainbase-web.pages.dev/) | 2026-02-26 | Online | Cloudflare | [balancer-fi-finance.pages.dev](https://phishdestroy.io/domain/balancer-fi-finance.pages.dev/) | 2026-02-26 | Online | Cloudflare | [ballanceir.xyz](https://phishdestroy.io/domain/ballanceir.xyz/) | 2026-02-26 | Taken down | Dynadot | [balancer.dashboard-signin.com](https://phishdestroy.io/domain/balancer.dashboard-signin.com/) | 2026-02-26 | Taken down | PublicDomainRegistry.com | [balancer-v2.net](https://phishdestroy.io/domain/balancer-v2.net/) | 2026-02-14 | Offline | NiceNIC | [All 72 Balancer reports](https://phishdestroy.io/domain/?brand=Balancer) ## Where they are registered and hosted ### Registrars - Cloudflare25 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)10 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)7 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)7 - [OwnRegistrar](https://phishdestroy.io/registrar/ownregistrar/)2 - [Web Commerce Communications dba WebNic.c](https://phishdestroy.io/registrar/webnic/)2 - Cloudflare Pages2 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)1 ### Top-level domains - [.dev](https://phishdestroy.io/tld/dev/)26 - [.com](https://phishdestroy.io/tld/com/)17 - [.xyz](https://phishdestroy.io/tld/xyz/)6 - [.org](https://phishdestroy.io/tld/org/)5 - [.app](https://phishdestroy.io/tld/app/)3 - [.net](https://phishdestroy.io/tld/net/)3 - [.fi](https://phishdestroy.io/tld/fi/)2 - [.vip](https://phishdestroy.io/tld/vip/)1 ### Hosting networks - Cloudflare, Inc.30 - CLOUDFLARENET, US18 - YURTEH-AS Virtual Systems LLC, UA6 - AMAZON-02, US4 - GOOGLE, US2 - CLOUDFLARENET - Cloudflare, Inc., US2 - OVH OVH SAS, FR1 - FASTLY, US1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Balancer; share of all PhishDestroy reports: 0.03%. Canonical: https://phishdestroy.io/brand/balancer/