MALICIOUS — CRITICAL
Phishing- und Sicherheitsprüfung für us-balancer-protocol.pages.dev
us-balancer-protocol[.]
PhishDestroy identifies us-balancer-protocol.pages.dev as an active brand impersonation domain targeting Balancer users.
- VirusTotal
- 1/91
- Blocklists
- No stored match
- Verfügbarkeit
- Letzter bekanntermaßen aktiv · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
us-balancer-protocol.pages.dev — Letzter bekanntermaßen aktiv (HTTP 200). Markenidentität: Balancer; Betrugstyp: Brand Impersonation. Zusammenfassung der Beweislage: VirusTotal 1/91 (LevelBlue); PhishDestroy score 76/100. Registrar: Cloudflare.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
PhishDestroy identifies us-balancer-protocol.pages.dev as an active brand impersonation domain targeting Balancer users. The site mimics the official Balancer protocol interface to deceive visitors into connecting cryptocurrency wallets and initiating unauthorized token transfers. This domain presents an elevated risk due to its deliberate misuse of the Balancer brand and potential for crypto asset theft. This domain was flagged by PhishDestroy with the unique seed identifier eda551. VirusTotal analysis indicates only 1 out of 95 security vendors currently detect this threat. The domain resolves to IP address 172.66.44.232 and operates under Google Trust Services SSL certificate. Registered through Cloudflare, Inc., this site leverages Cloudflare Pages to host the fraudulent content. The domain shows no current presence on major blocklists but maintains low trust scores across threat intelligence platforms. Organizations and individuals should immediately block access to us-balancer-protocol.pages.dev at network and endpoint levels. Users who may have interacted with this domain should disconnect their wallets from any connected applications and revoke any permissions granted to suspicious domains. Report the domain to Balancer's official security channels and your organization's security team. Implement DNS filtering rules to prevent future access to this and similar impersonation domains. Consider deploying browser extensions that detect brand impersonation attempts and crypto drainer signatures. Always verify website URLs and use official communication channels when interacting with cryptocurrency protocols.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Datenabdeckung12 recorded checks
Erkenntnisse zur Netzwerksicherheit
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Technologien · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100 % KonfidenzCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % KonfidenzHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % KonfidenzVirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of us-balancer-protocol.pages.dev · checked Apr 29, 2026
Nachweise und externe BerichteIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.