wquhcz[.]christmas

The domain www.wquhcz.christmas was registered on 2026-07-06 through Spaceship, Inc. and is served by the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. DNS resolution points to the IPv4 address 47.242.217.10, which remains active as of the report date. VirusTotal analysis shows that 7 out of 91 scanning engines have flagged the domain, indicating a non‑trivial level of malicious reputation. The observed threat classification is generic_phishing with a high risk rating, suggesting the site is likely used to harvest credentials or personal data by masquerading as a legitimate service. No open‑source web content, page titles, or target brand information have been disclosed, so the specific victim lure cannot be confirmed at this time. Infrastructure patterns such as rapid domain creation, use of a dedicated registrar, and a single public IP are consistent with opportunistic phishing campaigns that rely on short‑lived domains. Defenders should add the domain and its resolving IP to blocklists, monitor DNS queries for similar launch*.spaceship.net name servers, and consider sink‑holing the IP address to prevent further data collection. Ongoing intelligence collection is recommended to verify the payload and to determine whether additional domains share the same hosting infrastructure.