cxvmjk[.]christmas

This domain, cxvmjk.christmas, was registered on July 12, 2026 through Spaceship, Inc. and currently resolves to the IPv4 address 47.242.217.10. The domain is flagged as a generic phishing campaign and remains active as of the report date, July 19, 2026, with its risk level listed as under investigation. VirusTotal records indicate that the domain was submitted to 95 scanning engines, none of which returned a positive detection at the time of analysis; this absence of detections does not constitute evidence of benign behavior. Infrastructure analysis shows a single A‑record pointing to the aforementioned IP, suggesting a low‑complexity hosting setup that can be rapidly re‑used for credential‑harvesting or malicious redirects. No additional infrastructure such as CDN services, secondary IPs, or known malicious payloads has been identified. The lack of publicly available page content or brand attribution leaves the exact phishing lure undefined, creating uncertainty around the targeted victim profile. Defenders should consider adding cxvmjk.christmas and its resolved IP to blocklists, enforce DNS sink‑holing for the domain, and monitor network traffic for outbound connections to 47.242.217.10. Continuous re‑scanning with multi‑engine services is recommended to capture any future malicious payloads that may be associated with the domain.