tuil[.]christmas

Analysis shows that www.tuil.christmas was registered on July 08, 2026 through Spaceship, Inc. and is served by the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. The domain resolves to the IPv4 address 47.242.217.10 and remains active as of the reporting date. VirusTotal scans indicate that 7 of 91 security vendors flag the domain, suggesting the presence of malicious indicators. The threat classification is generic_phishing with a high risk rating, implying that the site is likely being used to harvest credentials or other sensitive data. No public page content, landing‑page structure, or specific phishing campaign details have been disclosed, leaving the exact attack vector and targeted brand unknown. Defenders should treat the domain as hostile: block DNS resolution and HTTP/S traffic to the IP address, add the domain to internal and external blocklists, and monitor outbound connections for attempts to contact the name servers or the host. Continuous re‑scanning on VirusTotal and correlation with intrusion‑detection alerts are recommended to detect any evolving malicious payloads associated with this infrastructure.