consensyapp[.]com

This domain, consensyapp.com, is currently active as a brand impersonation phishing site targeting users of the legitimate blockchain technology provider Consensys. Analysis indicates the site presents itself as a Japanese-language technology solutions provider under the name 'Consensy-Lab,' closely resembling the authentic Consensys brand through visual and naming similarities. The threat type is specifically classified as brand impersonation with intent to deceive visitors into engaging with fraudulent technical or financial services. Infrastructure analysis reveals multiple high-risk indicators. The domain is flagged by 11 of 95 security vendors on VirusTotal, including detection as a phishing or malicious site. It resolves to the IP address 104.21.64.218 and is protected by Cloudflare, a common tactic to obscure hosting origins and evade takedowns. The domain was registered on December 14, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with suspicious domains. Additional technical indicators include a Gridinsoft trust score of 0 out of 100 and presence on one security blocklist, further corroborating its malicious classification. The SSL certificate is issued by Google Trust Services, which does not mitigate the underlying fraudulent intent. The domain remains active and poses an elevated risk to users, particularly those seeking blockchain or technology solutions. Organizations and individuals are advised to block access to consensyapp.com at the network level and update endpoint protection rules to include this domain and its associated IP. Users who may have interacted with the site should immediately revoke any connected credentials, monitor financial accounts for unauthorized activity, and report the incident to relevant cybersecurity authorities. Continuous monitoring for similar impersonation domains using variations of the Consensys brand name is strongly recommended.