bvnmml[.]christmas

Analysis indicates that www.bvnmml.christmas is an active phishing domain registered on July 06, 2026, through a privacy service. The domain currently resolves to IP address 47.242.217.10 and uses nameservers launch1.spaceship.net and launch2.spaceship.net, suggesting infrastructure linked to automated domain registration platforms. As of July 15, 2026, seven out of ninety-one security vendors on VirusTotal have flagged the domain, reinforcing the classification as high-risk for credential theft or generic phishing activity. No specific brand impersonation or phishing kit has been confirmed in available data, and the exact content of the site remains unanalyzed. The nine-day-old registration aligns with common phishing lifecycle patterns, where domains are deployed rapidly and often abandoned within weeks. Defenders should treat this domain as hostile infrastructure and consider blocking resolution at the DNS level or monitoring for connections to the associated IP. Further investigation into the hosting provider and related domains on the same IP may reveal additional compromised assets.