consensusstudio[.]ai

Analysis of consensusstudio.ai indicates a high-risk brand-impersonation operation targeting the Across protocol. The domain, registered on December 5, 2025, through Porkbun LLC, resolves to IP address 172.67.138.71 and is currently active. It is flagged by 11 of 95 security vendors on VirusTotal and appears on two security blocklists, including PhishDestroy and BLP-Malware. The page title, 'Consensus Studio - Multi-AI Decision Making,' does not explicitly confirm the impersonated brand but aligns with the reported 'across' brand target. Infrastructure analysis reveals the use of Cloudflare, Amazon Web Services, Vercel, and Apple iCloud Mail, alongside HTTP/3 and HSTS, suggesting a technically sophisticated setup. The domain is also referenced in 24 threat intelligence pulses on AlienVault OTX, further corroborating malicious intent. Gridinsoft assigns a trust score of 0/100, reinforcing its classification as high-risk. Defenders should treat this domain as actively malicious, block it at the network level, and monitor for related indicators of compromise. The exact content of the site remains unanalyzed, but the combination of brand impersonation, low trust scores, and multiple vendor detections confirms its role in fraudulent activity.