nuhg[.]christmas

The domain nuhg.christmas was registered on May 19 2026 through Spaceship, Inc. and is currently resolved to the IPv4 address 47.242.217.10. The authoritative nameservers launch1.spaceship.net and launch2.spaceship.net are consistent with the registrar’s infrastructure. Within two months of creation the domain appeared on a public phishing blocklist and is also listed by the PhishDestroy sink‑hole service, indicating that it is being used in active malicious campaigns. VirusTotal analysis shows that 7 of 91 scanning engines have flagged the domain, providing independent confirmation of suspicious behavior.

No public SSL certificate details, HTTP status codes, or page title information have been published, so the exact content served by the site remains unknown. The lack of observed page metadata prevents attribution of a specific brand or lure type, and no evidence of a particular phishing kit has been released. Nevertheless, the combination of recent creation, rapid blocklist inclusion, and multiple vendor detections classifies the domain as high‑risk.

Defenders should immediately add nuhg.christmas to DNS and web‑proxy deny lists, ensure that endpoint protection solutions ingest the VirusTotal detection count, and monitor outbound traffic for connections to 47.242.217.10. Continuous feed updates from PhishDestroy and other anti‑phishing repositories are recommended to capture any future changes in hosting or payload. Because the infrastructure is tied to the Spaceship, Inc. registrar, any further domains created under the same nameserver set should be scrutinized for similar activity.