cxvyukl[.]christmas

Analysis of cxvyukl.christmas shows a newly registered domain (creation date 2026-07-12) hosted by Spaceship, Inc. The domain resolves to IP 47.242.217.10 and is currently active. The threat classification is generic_phishing, indicating it is being used to harvest credentials or personal information. VirusTotal records indicate the domain has been scanned by 95 vendors, none of which have raised a detection; this absence of detections does not confirm safety and may reflect limited visibility. No public page content, page title, or brand targeting information is available, so the exact phishing lures employed remain unknown. The short age of the domain and the lack of detection suggest an early-stage infrastructure that may be leveraged in targeted campaigns. Defenders should add the domain and its resolving IP to block lists, monitor DNS queries for lookups, and consider sinkholing the address. Continuous re-scanning with multiple engines is advised, as additional detections may appear as the site becomes more active. Because the domain is still under investigation, any observed credential submissions to the address should be treated as compromised and associated accounts reset.