Monthly report attached - February 2025

Bad and suspicious domains detected, shared with vendors for removal where applicable: 29

(Many are parked, old re-spawned domains, and/or pretend to be irrelevant or innocent, unless victim meets criteria or arrives from laced ad or link, making take-downs harder )

URLs

• app-balanacer.fi
• baiancer.org
• baiancer.pro
• balancer-pro.ru
• balancer-pro.store
• balancer-sw.online
• balancer-sw.org
• balancer-v2-appk2w.pages.dev
• balancer.fi-dapp.pro
• balancer.fi-pools.xyz
• balancer.it.com
• balancer.llc
• balancer.mobi
• balancer.top
• balancer.ws
• balancer24.com
• balancerapp.live
• balancerfi.cam
• balancerfi.cfd
• balanceroot.com
• balancersd.com
• baliancer.com
• ballancer.app
• bonusing-balancer.xyz
• claim-balancer.xyz
• proposals-balancer.net
• rewards-balancer.net
• v2-balancer.xyz
• v3-baiancer.com
  

    UrlScan IoCs
     Balancer

• https://urlscan.io/search/#hash%3A4190365d98e4a8b7dd238d9a00e90ef10fe61f4ebdd434dc9bdf58bb3b18c145%20AND%20page.domain%3A(NOT%20balancer.fi)
• https://urlscan.io/search/#hash%3A3a72e9cdb4410479c260db7d0d38bef02b09f10afe396764e073088201570ad0%20AND%20page.domain%3A(NOT%20balancer.fi)
• https://urlscan.io/search/#hash%3Af6fdab9c41d39233683686605861ba73a844534ba76886666d923e0c158fe12c%20AND%20page.domain%3A(NOT%20balancer.fi)
• https://urlscan.io/search/#hash%3A8e4700b375a7ee6fef79af6f73cf3466980edaf8d6d514c90f89f280e1a1428c%20AND%20page.domain%3A(NOT%20balancer.fi)

Pingdom monitoring Uptime and DNS changes - all good

After the Safe/By Bit hack i have also started to make SSDEEP hash of the site and compare it to previous versions, to see if .JS files may have been changed etc.

(currently a PoC)

```

var webPage = require('webpage');

var page = webPage.create();

page.open('http://balancer.fi', function(status) {

    if (status === 'success') {

        var htmlContent = page.content;

        console.log(htmlContent);

        phantom.exit();

    } else {

        console.error('Failed to load the page');

        phantom.exit(1);

    }

});

```

Multiple offenders exposed and banned in Discord

from:dubstard After: 2025-02-01 Before: 2025-02-28 in: 👮︲moderation

239 scammers/offenders banned in February 2025, on top of the bans enforced by the AutoMod + the Multi server bot and the new MEE6 bots, who do much of the heavy lifting now in terms of auto bans and deleting bogus invitations towards external discord servers. The helper elamore also exposes many of them and Dan bans a ton as well.

Big whack-a-mole.
Many following this pattern: text_digits_digits

donna_tu7361656_29898
lisa_nx9083961_50497
jennifer_ay5982511_30857
betty_qp4345591
nancy_tz1198242_38073
dorothy_xv5321870_72230
susan_ia9036561_89693
karen_rn5841156_39217
lisa_nx9083961_50497

Warnings issued Discord

Public facing
05 February

17 February

February

February

27 February




28 February

Key for DeBank

Still plenty of Computing Units available - 867,545

SEAL 911 bot