balancer[.]dashboard-signin[.]com

The domain balancer.dashboard-signin.com was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. DNS resolution points to the IPv4 address 188.114.97.3, which is announced by AS13335 Cloudflare, Inc. and geolocated to the United States. The authoritative name servers are davina.ns.cloudflare.com and zahir.ns.cloudflare.com, both indicating that the domain is fully hosted behind Cloudflare's edge network. An SSL certificate issued by SSL Corporation under the Cloudflare TLS Issuing ECC CA 3 chain is active, and the site returns HTTP status code 200 over HTTP/3. VirusTotal scans have flagged the domain in 8 of 95 security vendor engines, and the domain appears on two external blocklists that have been incorporated by PhishDestroy and ScamSniffer. The page title served by the site reads "Balancer DeFi AMMs made easy", matching the declared brand target Balancer and suggesting a cryptocurrency‑related lure. The combination of a recent registration, use of reputable CDN services, a valid TLS certificate, and a brand‑specific title aligns with a high‑risk brand impersonation campaign aimed at deceiving users of the Balancer DeFi platform. Publicly available intelligence does not reveal the underlying payload or the exact phishing workflow, so the full scope of credential or fund harvesting mechanisms remains unknown. Defenders should block the resolved IP address 188.114.97.3 and the domain name at DNS and proxy layers, monitor for any TLS certificate re‑issuance, and enrich telemetry with the known nameserver set. Continuous observation of the domain's activity and rapid inclusion in internal blocklists are advised, given the active status and the high‑risk rating.