allocation-balancer[.]xyz

Analysis indicates that allocation-balancer.xyz was registered on June 28, 2025 through Dynadot LLC and resolves to IP address 75.2.115.196. The domain uses an SSL certificate from Let's Encrypt. Its recorded page title matches the domain string directly. The site is flagged under the brand_impersonation category with balancer listed as the target brand. The domain maintains an active status according to the July 12, 2026 report date.

Infrastructure analysis reveals presence in 23 AlienVault OTX threat intelligence pulses along with listings on two security blocklists, PhishDestroy and BLP-Malware. Gridinsoft records a trust score of 0 out of 100 for the domain. VirusTotal shows 0 detections across 95 scanners, yet this metric does not override the blocklist and pulse data already collected from other sources.

The risk level remains under_investigation with no additional ASN or geolocation details supplied in the available records. Exact page content has not been examined beyond the title string, leaving the full scope of the impersonation operation unconfirmed at this stage. The domain creation date falls within the normal range for active infrastructure observed in 2025 and 2026.

Defenders should add the IP 75.2.115.196 and the domain allocation-balancer.xyz to internal watchlists and filtering rules. Correlation of traffic to these indicators with existing OTX pulses can support identification of related activity. Reporting any observed connections to security teams enables further cross-referencing against the known blocklist entries without reliance on unverified external classifications.