allocate-balancer[.]xyz

The domain allocate-balancer.xyz was registered on June 28, 2025 through Dynadot LLC and resolves to the IP address 75.2.115.196, which is hosted in the United States under ASN 16509 (Amazon.com, Inc.). The authoritative name servers are ns1.dyna-ns.net and ns2.dyna-ns.net, and the site presents a valid Let’s Encrypt TLS certificate. An HTTP GET returns status 200 and the page title is exactly "allocate-balancer.xyz". Infrastructure indicators show a Gridinsoft trust score of 0 / 100, signalling a highly untrusted reputation. The domain appears on at least one public blocklist, PhishDestroy, and has been cited in 23 AlienVault OTX threat‑intelligence pulses, reinforcing its classification as a brand‑impersonation campaign targeting the brand “balancer”. VirusTotal analysis recorded detections from 2 of 95 scanned security vendors, further corroborating malicious intent. Although the exact page content has not been examined, the convergence of low trust scoring, blocklist inclusion, multiple threat‑intel references, and vendor detections justify a high‑risk rating. Defenders should add allocate-balancer.xyz to deny‑list rules, monitor DNS queries for the associated IP range, and consider sink‑holing traffic to prevent credential harvesting or other brand‑impersonation activities. Ongoing observation of any changes to the SSL certificate, hosting provider, or DNS records is advised to detect potential re‑use or relocation of the malicious infrastructure.