tessllaa[.]com

This domain, tessllaa.com, is actively flagged as a high-risk phishing site targeting user credentials. Registered on April 26, 2026, through Global Domain Group LLC, the domain remains operational as of July 27, 2026, with no evidence of takedown. Infrastructure analysis reveals it resolves to IP address 88.198.100.143 and uses nameservers ns1.safedns247.com, ns2.safedns247.com, ns1.twoonehosting.com, and ns2.twoonehosting.com, suggesting shared or bulletproof hosting infrastructure commonly associated with malicious campaigns. Detection data is limited but consistent: the domain appears on one security blocklist (PhishDestroy) and is flagged by 2 of 91 security vendors on VirusTotal, indicating early but clear malicious classification.

No additional context regarding the phishing kit, targeted brand, or specific lure type is available in current intelligence. The absence of broader detection does not imply safety; rather, it reflects limited visibility or recent deployment. Defenders should treat this domain as hostile. Immediate actions include blocking DNS resolution to 88.198.100.143 and the listed nameservers within enterprise security controls, adding tessllaa.com to web filtering and email security policies, and monitoring for connections from internal assets.

Given the domain’s recent registration and active status, assume it is part of an ongoing campaign. No SSL or HTTP response data is provided, so defenders should not rely on certificate transparency or server behavior for detection until further analysis is conducted. The exact content and target of the phishing page remain unconfirmed; however, the classification as credential harvesting is supported by the detection pattern and infrastructure profile.