consensys-peak[.]com

This domain, consensys-peak.com, operates as a fraudulent imitation of a legitimate cryptocurrency wallet service. Analysis indicates it was designed to harvest user credentials, private keys, or recovery phrases by presenting a counterfeit interface mimicking the authentic platform. Visitors entering sensitive information risk immediate account compromise and unauthorized asset transfers, with potential for follow-on attacks targeting connected services or contacts. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on October 17, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with newly created phishing infrastructure. Security platforms flagged the domain with 12 detections out of 95 vendors, including classification as a generic phishing threat. It resolved to IP address 172.67.138.104, hosted on Cloudflare infrastructure in the United States, and appeared on at least one security blocklist prior to takedown. The SSL certificate, issued by Google Trust Services, provided a false sense of legitimacy while facilitating encrypted data exfiltration. Individuals who visited consensys-peak.com should assume credential exposure and take immediate remediation steps. Disconnect any wallets or accounts accessed during the visit and revoke all active sessions. Initiate a full security review of all connected devices for malware or unauthorized access. Rotate passwords and recovery phrases for all cryptocurrency accounts, prioritizing those accessed during the suspected compromise window. Monitor transaction histories for unauthorized activity and report any suspicious transfers to the relevant platform support teams. Consider implementing hardware-based authentication for high-value accounts to mitigate future credential-based attacks.