consensys-gen[.]com

The domain consensys-gen.com was registered on October 17, 2025 through Gname.com Pte. Ltd. and is currently taken offline. DNS resolution points to the IP address 104.21.92.228, which belongs to AS13335 Cloudflare, Inc., located in the United States. The domain uses Cloudflare’s authoritative nameservers howard.ns.cloudflare.com and kinsley.ns.cloudflare.com, and does not present an SSL/TLS certificate, meaning any HTTP connections would be unencrypted. A page title retrieved from the site reads "Consensys," but no further content analysis is available.

Reputation data indicates that seven of ninety‑five security vendors on VirusTotal have flagged the domain, suggesting malicious characteristics that align with phishing behavior. The domain appears on a single security blocklist and is specifically listed by PhishDestroy as a phishing source. Independent scoring from Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the assessment of high risk.

The available evidence does not disclose the exact phishing lure or target brand beyond the generic page title, so the precise social engineering vector remains uncertain. Defenders should block the domain at network perimeter devices, update URL filtering and DNS sinkhole lists to include consensys-gen.com, and monitor Cloudflare‑hosted IP ranges for related activity. Continuous re‑evaluation is recommended should the domain become active again, as additional telemetry such as HTTP response codes, content snapshots, or user‑reporting could clarify the threat’s scope.