Domain
consensus.app
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of consensus.app
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
11
A/AAAA targets
Subdomains
37
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
13
in our scans
DNS Records
A
104.26.4.198, 104.26.5.198, 172.67.75.88
AAAA
2606:4700:20::681a:4c6, 2606:4700:20::681a:5c6, 2606:4700:20::ac43:4b58
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
deb.ns.cloudflare.com, devin.ns.cloudflare.com
TXT
google-site-verification=LPyQudxB2RpVXbhIK820Ez-o49xWXbKV-QePj9uUyRw, google-site-verification=mZVfEU0a7IeGkQvzFwNnt2SqpiV0jBP0O9f6CjEfzpQ, nordpass-domain-verification=489137f87155cef6635822c24a818fbe6ebaa8c4091d516e5dcb32b0a56afbf3, openai-domain-verification=dv-Zsp0xfmwmImFnBET5e0KDFyy, ps-cd-verification=3f81fcad-ed51-4cc2-a050-66388736f7fb, v=spf1 include:47141966.spf03.hubspotemail.net include:_spf.google.com ~all
CNAME
—
CAA
0 issue "comodoca.com", 0 issue "digicert.com; cansignhttpexchanges=yes", 0 issue "letsencrypt.org", 0 issue "pki.goog; cansignhttpexchanges=yes", 0 issue "ssl.com", 0 issuewild "comodoca.com", 0 issuewild "digicert.com; cansignhttpexchanges=yes", 0 issuewild "letsencrypt.org"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| consensus.app | 2026-07-28 12:04:07.574 | |
| docs.consensus.app | 2026-07-14 21:10:55.316 | |
| internal.consensus.app | 2026-07-19 16:02:28.638 | |
| internal.k8s.consensus.app | 2026-07-19 16:02:28.638 | |
| www.consensus.app | 2026-07-22 13:04:15.130 | |
| api.consensus.app | 2026-07-21 11:51:30.555 | |
| chat.consensus.app | 2026-07-21 11:51:30.555 | |
| chat.k8s.consensus.app | 2026-07-21 11:51:30.555 | |
| checkout.consensus.app | 1970-01-01 00:00:00.000 | |
| dev.api.consensus.app | 2026-07-20 18:21:02.021 | |
| dev.chat.consensus.app | 2026-07-20 18:21:02.021 | |
| dev.chat.k8s.consensus.app | 2026-07-20 18:21:02.021 | |
| framer.consensus.app | 1970-01-01 00:00:00.000 | |
| k8s.consensus.app | 2026-07-22 13:04:15.130 | |
| mcp.consensus.app | 2026-07-24 09:12:36.162 | |
| site.consensus.app | 1970-01-01 00:00:00.000 | |
| topics.consensus.app | 1970-01-01 00:00:00.000 | |
| www.internal.consensus.app | 2026-07-19 16:02:28.638 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: chat.k8s.consensus.app
Issuer: YR2
SANs: api.consensus.app, chat.consensus.app, chat.k8s.consensus.app
Subject: dev.chat.k8s.consensus.app
Issuer: R12
SANs: dev.api.consensus.app, dev.chat.consensus.app, dev.chat.k8s.consensus.app
Subject: k8s.consensus.app
Issuer: R13
SANs: consensus.app, k8s.consensus.app, www.consensus.app
Subject: dev.chat.k8s.consensus.app
Issuer: R13
SANs: dev.api.consensus.app, dev.chat.consensus.app, dev.chat.k8s.consensus.app
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 35.244.254.179 | AS396982 | AS13335 | 95% | cert bc16c349… served by 35.244.254.179 (AS396982) carries SAN consensus.app which currently resolves through Cloudflare (AS13335) at 172.67.75.88, 104.26.4.198, 104.26.5.198, 2606:4700:20::681a:5c6 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | v=spf1 include:47141966.spf03.hubspotemail.net include:_spf.google.com ~all | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| CAA | 0 issue "comodoca.com" | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| CAA | 0 issuewild "pki.goog; cansignhttpexchanges=yes" | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| AAAA | 2606:4700:20::681a:5c6 | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| NS | deb.ns.cloudflare.com | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| TXT | google-site-verification=mZVfEU0a7IeGkQvzFwNnt2SqpiV0jBP0O9f6CjEfzpQ | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| TXT | ps-cd-verification=3f81fcad-ed51-4cc2-a050-66388736f7fb | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| A | 104.26.5.198 | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| NS | devin.ns.cloudflare.com | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| CAA | 0 issue "ssl.com" | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| A | 104.26.4.198 | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| CAA | 0 issuewild "digicert.com; cansignhttpexchanges=yes" | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| CAA | 0 issuewild "ssl.com" | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| MX | 10 alt4.aspmx.l.google.com | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| AAAA | 2606:4700:20::ac43:4b58 | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| MX | 1 aspmx.l.google.com | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| CAA | 0 issue "digicert.com; cansignhttpexchanges=yes" | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| CAA | 0 issuewild "comodoca.com" | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| CAA | 0 issuewild "letsencrypt.org" | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| A | 172.67.75.88 | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| CAA | 0 issue "pki.goog; cansignhttpexchanges=yes" | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| MX | 10 alt3.aspmx.l.google.com | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| TXT | openai-domain-verification=dv-Zsp0xfmwmImFnBET5e0KDFyy | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| CAA | 0 issue "letsencrypt.org" | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| AAAA | 2606:4700:20::681a:4c6 | 2026-05-26 06:22:57.651 | 2026-07-28 12:04:07.574 |
| TXT | nordpass-domain-verification=489137f87155cef6635822c24a818fbe6ebaa8c4091d516e5dcb32b0a56afbf3 | 2026-06-17 17:39:11.833 | 2026-07-28 12:04:07.574 |
| TXT | google-site-verification=LPyQudxB2RpVXbhIK820Ez-o49xWXbKV-QePj9uUyRw | 2026-07-28 12:04:07.574 | 2026-07-28 12:04:07.574 |