vht0p9fsyg[.]balanceandperformance[.]de

This assessment reviews the domain vht0p9fsyg.balanceandperformance.de, which is currently active and has been flagged for generic phishing threats. The domain was registered recently on June 14, 2026, suggesting it could be part of a newly established phishing campaign. Infrastructure analysis shows that the domain resolves to IP address 172.67.194.184. Notably, it has been included on at least one security blocklist and is currently blocked by PhishDestroy, which indicates that leading security intelligence sources have identified it as malicious. VirusTotal results further corroborate this risk, with 14 out of 91 security vendors detecting phishing or related threats associated with the domain.

At this time, there is no detailed information about the website’s content, as no page title or specific scam type has been reported. Thus, defenders should treat the domain as a generic phishing risk, with the exact attack vector or impersonation method presently unconfirmed. The domain’s recent creation date, combined with multiple independent security detections and blocklist entries, heightens the risk profile and supports a proactive defensive posture.

Security teams are advised to block access to vht0p9fsyg.balanceandperformance.de across user endpoints, update email and web filtering rules to prevent potential phishing attempts, and monitor for related indicators of compromise. Ongoing monitoring is recommended in case new intelligence—such as additional detections, changes in hosting infrastructure, or identification of targeted brands—becomes available.