tesserape[.]xyz

PhishDestroy has identified tesserape.xyz as an active phishing domain designed to impersonate legitimate login portals, likely targeting unsuspecting users to harvest credentials. This domain was flagged under generic_phishing and is currently under investigation for malicious intent. The domain resolves to IP 172.67.178.214 and was registered on March 27, 2026, through OwnRegistrar, Inc., with a Let's Encrypt SSL certificate in place to appear legitimate. VirusTotal currently shows 2/95 detections, indicating it has not yet been widely blacklisted, which increases the risk of exposure to potential victims. The domain's recent creation date and lack of detections suggest it is a newly deployed threat, leveraging fresh infrastructure to evade traditional security measures. The use of a legitimate SSL certificate further enhances its credibility, tricking users into believing it is a trustworthy source. While the specific brand or service being impersonated has not been confirmed, the generic nature of the domain name implies opportunistic targeting rather than a focused campaign against a specific organization. If you have visited tesserape.xyz, assume your credentials or personal data may have been compromised. Do not reuse passwords associated with this domain and enable multi-factor authentication (MFA) on all critical accounts. Report any suspicious activity to your IT security team or the platform being impersonated. Avoid interacting with this domain further, as it may deliver additional malware or phishing attempts. Stay vigilant and verify the legitimacy of login portals before entering credentials.