# balancer.dashboard-signin.com — MALICIOUS

> Balancer.dashboard-signin.com poses a medium risk for credential phishing. Learn how to protect yourself from this deceptive site.

## Summary
PhishDestroy identifies balancer.dashboard-signin.com as a phishing domain designed to steal user credentials. This site mimics legitimate Balancer DeFi platforms to trick users into submitting sensitive login information. Although currently offline, it previously posed a medium-level threat, making it important to stay alert against similar scams.

This phishing operation worked by presenting a fake login page titled “Balancer DeFi AMMs made easy,” aiming to lure DeFi users into entering their private credentials. The domain was newly created in February 2026 and resolved to an IP address flagged on multiple security blocklists. VirusTotal analysis showed 8 out of 95 security tools detected suspicious activity associated with this domain, indicating a moderate but credible risk.

If you visited balancer.dashboard-signin.com and entered your login details, immediately change your passwords on all related accounts and enable two-factor authentication where possible. Monitor your accounts for unusual activity and consider running a full security scan on your devices. Staying informed and cautious with URLs related to decentralized finance platforms is essential to avoid falling victim to credential phishing attempts.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: Balancer DeFi AMMs made easy

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["davina.ns.cloudflare.com", "zahir.ns.cloudflare.com"]
- SSL Issuer: SSL Corporation / Cloudflare TLS Issuing ECC CA 3

## Detection Status
- VirusTotal: 8 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "Fortinet", "G-Data", "Kaspersky", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "ScamSniffer"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a5c9f-3f4b-7668-bdda-568250a99229.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/9b16adeb-5812-4823-90b9-e08ffc8e12f4
- PhishDestroy: https://phishdestroy.io/domain/balancer.dashboard-signin.com/
- LLM endpoint: https://phishdestroy.io/domain/balancer.dashboard-signin.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/balancer.dashboard-signin.com/
Last updated: 2026-03-19