maisonchristina[.]com

Analysis of maisonchristina.com indicates active credential phishing infrastructure. The domain, registered on October 21, 2018, through PDR Ltd. d/b/a PublicDomainRegistry.com, remains operational as of July 22, 2026. It resolves to IP address 130.185.83.236 and uses nameservers dns1.linkage.pt, dns2.linkage.pt, ns1.linkage.pt, and ns2.linkage.pt, suggesting centralized hosting or DNS management. Security vendor detection on VirusTotal shows 7 of 95 engines flagging the domain, a moderate but notable signal given the age of the domain and potential evasion techniques.

The domain appears on two independent security blocklists and is actively blocked by PhishDestroy and OpenPhish, reinforcing its classification as malicious. No specific brand target or phishing kit has been confirmed in available intelligence, so the exact nature of the credential harvesting—whether targeting corporate, financial, or personal accounts—remains uncertain. The domain’s longevity (nearly eight years) may indicate persistent reuse or slow detection rates rather than benign intent.

Defenders should treat this domain as high-risk and implement blocking at DNS, proxy, or endpoint levels. Network monitoring should include the IP 130.185.83.236 and associated nameserver infrastructure for lateral movement or data exfiltration attempts. No SSL certificate or HTTP response data is currently available for deeper analysis, so real-time inspection of traffic to this domain is recommended to identify payload delivery or stolen data transmission patterns.