sessorax[.]com

Analysis conducted on July 21, 2026 identifies the newly registered domain sessorax.com as part of an active generic phishing campaign. The domain was registered through TUCOWS.COM, CO, with a creation timestamp of July 20, 2026, indicating a rapid deployment. DNS resolution points to the IPv4 address 91.92.241.145, and the authoritative name servers are 1-you.njalla.no, 2-can.njalla.in, and 3-get.njalla.fo, which are commonly associated with privacy‑focused hosting services. The domain has been flagged by VirusTotal, where one of ninety‑five scanning engines raised a detection, and it appears on a single security blocklist that is currently enforced by the PhishDestroy filtering service. No additional intelligence such as SSL certificate details, HTTP response codes, page titles, or observed brand impersonation has been published, leaving the exact phishing lure undefined. Nonetheless, the combination of recent registration, dedicated hosting, and early detection by multiple security tools suggests a purposeful malicious infrastructure. Defenders should add sessorax.com to outbound and inbound filtering rules, monitor DNS queries for the associated name servers, and consider network‑level blocks for the host IP 91.92.241.145. Continuous re‑scanning with multi‑engine services is recommended to capture any evolution of the payload or additional detections. Organizations that employ URL filtering should ensure that the PhishDestroy blocklist is active, as it already enumerates this domain. Given the high risk rating and active status, proactive mitigation is advised.