Domain · verified · Standard · Deep until 31 Oct · Platform
24 hosts, 21 answering on the web · 17 open issues on them · last scan complete
vpn.tessellatepay.com · found Mon 12 Oct · nobody has claimed it
Runs FortiOS 7.0.12, which attackers are exploiting now (CVE-2024-21762). Until someone says what it is and who owns it, its findings go to nobody.
How each host meets the internet
24 hosts that resolve · the top layer is what attackers reach first
Straight onto the internet
8 hosts2 meant to be internal
Its own address answers. Whatever it runs, attackers reach directly.
Behind your edge
9 hosts
Cloudflare or CloudFront answers first: a firewall and rate limits in front.
On someone else's platform
5 hosts
Vercel, Heroku, WP Engine and the like run it. They patch the server; you own the name.
A name with nothing on the web
3 hosts
It resolves, but no website answers. Mail, or something forgotten.
Names that went quiet
7 hosts
Seen in certificate logs or DNS history, but they no longer resolve.
beta.tessellatepay.comdev.tessellatepay.comftp.tessellatepay.comlegacy.tessellatepay.compos.tessellatepay.compromo2025.tessellatepay.comtest-api.tessellatepay.com
Eight things answer straight from their own address, counting an origin behind your edge. That's where an attacker starts, and seven of them have open issues.
How much each mattersA crown jewelsB supports themC internal and brandD public information
Every host under tessellatepay.com
24 hosts that resolve · 5 with no owner · owners come from CODEOWNERS, naming or by hand
How we scan it, and letting us through
2 schedules · behind Cloudflare
Schedules
Our scanner comes from
User agent: SecureAssure-Scanner/2.4 (+https://secureassure.vernovi.io/scanner)
Letting us through
It's yours, and we keep checking
Verified Tue 1 Sep, 11:20 · rechecked every day
Keep the record in place. If a daily check stops finding it, Standard and Deep scans pause until it’s back, and this domain drops to the outside checks a vendor gets.