support-balancer[.]fi

support-balancer.fi was observed as an inactive web resource on July 24, 2026. The domain resolves to the IPv4 address 77.91.101.10, which is allocated to AS209847 (WorkTitans B.V.) in Great Britain. Registration details show the domain was created on May 28, 2025 through Realtime Register B.V., and it is served by the parking name servers ns1.dns-parking.com and ns2.dns-parking.com. No TLS certificate is presented, indicating the site operates without HTTPS. The page title returned from the host is “Swap | Sushi 🍣”, a mismatch to the advertised impersonation of the cryptocurrency brand aptos and the declared tech‑support scam profile.

Static analysis on VirusTotal recorded two detections out of ninety‑three scanning engines, and the domain appears on a single public security blocklist. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. PhishDestroy has actively blocked the domain. The evidence suggests that the operator is leveraging a generic parking infrastructure to host a malicious landing page that claims to provide support for aptos users, a typical pattern of brand‑impersonation tech‑support scams. Because the site is currently offline, further content cannot be retrieved, and the exact payload or credential‑harvesting mechanisms remain unknown.

Defenders should continue to deny DNS resolution for support-balancer.fi and its resolved IP address, add the address to network‑level deny lists, and monitor for any re‑registration or use of the same hosting ASN. Additional scrutiny of related parking name servers and the WorkTitans B.V. network is advised, as they may host other impersonation domains. Continuous feed updates from PhishDestroy, Gridinsoft, and VirusTotal should be consulted for new detections. Until the domain reappears, the present indicators provide sufficient justification for maintaining elevated blocking policies.