getsesson[.]xyz

The domain getsesson.xyz is a generic phishing site designed to facilitate account takeover scams. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, getsesson.xyz is suspended, displaying an 'Account Suspended' page, which limits its active threat but does not eliminate the risk of prior exposure.

Technical indicators confirm getsesson.xyz as a phishing domain with elevated risk. The domain was registered on 2026-02-21 07:01:08 through Cosmotown Inc and resolves to IP address 104.18.31.76, hosted on Cloudflare's infrastructure (AS13335). It is flagged by 2 of 95 VirusTotal security vendors, including alphaMountain.ai and Forcepoint ThreatSeeker, and appears on 1 security blocklist (PhishDestroy). The SSL certificate is issued by Let's Encrypt (R13), and the site uses LiteSpeed and HTTP/3 technologies. Gridinsoft assigns it a trust score of 0/100, and the current HTTP status is 403. Google Safe Browsing has not flagged the domain.

Individuals who interacted with getsesson.xyz should assume their credentials may be compromised. Immediately change passwords for any accounts accessed or entered on the site, enable two-factor authentication (2FA) where available, and monitor accounts for unauthorized activity. Report the domain to your email provider if phishing links were received via email, and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.