bvn546fgd[.]christmas

This domain, bvn546fgd.christmas, was registered on July 25, 2026, through Spaceship, Inc., and is currently flagged as a high-risk generic phishing threat. Infrastructure analysis reveals it resolves to the IP address 47.242.217.10 and uses nameservers launch1.spaceship.net and launch2.spaceship.net, indicating hosting through the same registrar. As of July 28, 2026, the domain appears on one security blocklist (PhishDestroy) and is marked as active.

VirusTotal reports that 2 out of 91 security vendors detect this domain as malicious, though the specific nature of the threat remains unconfirmed due to limited analysis of the site's content. The domain's registration date is recent, suggesting it may have been set up specifically for short-term phishing campaigns. No brand impersonation or specific scam type has been identified in available data, and the exact content of the site is not yet analyzed.

Defenders should treat this domain as suspicious based on its blocklist status, detection by security vendors, and recent registration. Network-level blocking at the IP and domain level is recommended, along with monitoring for related infrastructure or newly registered domains under the same registrar or hosting provider. Further investigation into the resolved IP and associated domains may reveal additional threats linked to this campaign.