# balancer.defi-amm.cc — SUSPICIOUS

> balancer.defi-amm.cc was linked to crypto draining scams. Though now offline, stay alert and avoid transactions with suspicious DeFi sites.

## Summary
PhishDestroy identifies balancer.defi-amm.cc as a low-risk crypto drainer domain designed to siphon cryptocurrency assets through deceptive decentralized finance (DeFi) interfaces. Despite its limited impact, the threat involved malicious intent to compromise users interacting with DeFi platforms.

The domain was registered on February 21, 2026, but was quickly flagged and taken offline. It appeared on a single security blocklist and was associated with a dead domain registration infrastructure. VirusTotal analysis showed minimal detection, corroborating the low threat level but confirming its malicious nature. The domain's short lifespan and low detection rates suggest early disruption by security vendors.

Currently offline and inactive, balancer.defi-amm.cc poses no immediate threat. Users should remain vigilant when engaging with DeFi domains, particularly newly registered or obscure ones. PhishDestroy recommends avoiding suspicious domains and verifying site authenticity before conducting crypto transactions to prevent exposure to similar crypto drainer campaigns.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 404)
- Page title: 404 Not Found

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- Nameservers: ["edna.ns.cloudflare.com", "lou.ns.cloudflare.com"]

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Forcepoint ThreatSeeker", "Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0198b4bb-11dd-7039-95fc-1a997ba818d5.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/6657bc14-a805-4b45-b923-fb9ddc452da8
- PhishDestroy: https://phishdestroy.io/domain/balancer.defi-amm.cc/
- LLM endpoint: https://phishdestroy.io/domain/balancer.defi-amm.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/balancer.defi-amm.cc/
Last updated: 2026-03-19