oquposun[.]christmas

This domain, oquposun.christmas, was registered on July 15, 2026, through Spaceship, Inc., and remains active as of July 22, 2026. Infrastructure analysis reveals it resolves to IP address 47.242.217.10 and uses nameservers launch1.spaceship.net and launch2.spaceship.net. The domain appears on one security blocklist, though no specific brand or scam type has been identified in available data. VirusTotal scans by 95 vendors returned no detections, but this absence does not confirm safety.

The domain is currently flagged by PhishDestroy as a generic phishing threat, though further classification of the phishing campaign is pending. Defenders should treat this domain as potentially malicious based on its recent registration, active status, and blocklist inclusion. The lack of detections in VirusTotal does not eliminate risk, as phishing domains often evade initial scans. Monitoring for changes in detection status, additional blocklist appearances, or shifts in resolving infrastructure is recommended.

If internal logs show connections to this domain, investigate for credential harvesting or malware delivery. No SSL certificate details or page content analysis are available at this time, so the exact phishing mechanism remains unconfirmed. Proactive blocking at the DNS or proxy level is advised until further analysis confirms benign intent.