consensy-jplad[.]vip

The domain consensy-jplad.vip was registered on February 21, 2026 through Gname.com Pte. Ltd. and is currently listed as offline. DNS resolution points to 188.114.97.3, an address owned by Cloudflare, Inc. (AS13335) and the domain is served from Cloudflare’s infrastructure, as indicated by the presence of Cloudflare nameservers howard.ns.cloudflare.com and kinsley.ns.cloudflare.com. The site presented the page title "Consensy-Lab | 技術革新を支えるソリューションプロバイダー," suggesting a Japanese-language focus, but no further page content has been captured. The SSL certificate is issued by Google Trust Services under the WE1 certificate authority, confirming that TLS termination is performed by Cloudflare.

Reputation checks show that 18 of 95 security vendors on VirusTotal flagged the domain, and Google Safe Browsing classifies it as social engineering. The domain appears on three external blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. No additional technical artifacts such as JavaScript kits or credential‑harvesting parameters have been disclosed.

Evidence indicates that the domain is being used for generic phishing, though the specific target or lure remains undefined. The combination of multiple vendor detections, blocklist listings, and a zero trust score signals a high risk to users. Defenders should block the domain at perimeter firewalls, update URL filtering policies, and ensure endpoint browsers enforce Google Safe Browsing. Incident response teams encountering traffic to this address should treat any associated activity as malicious and consider quarantine of affected hosts. Continuous monitoring of the IP 188.114.97.3 and related Cloudflare‑served domains is recommended, as threat actors often reuse this infrastructure for subsequent campaigns.