xcvuull[.]christmas

Analysis indicates that www.xcvuull.christmas was registered on July 5, 2026 through Spaceship, Inc. and is served by the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. The domain resolves to the IPv4 address 47.242.217.10. The current WHOIS record shows the domain remains active as of the report date, July 15, 2026. Threat intelligence classifies the domain under the generic_phishing category and marks its risk level as under_investigation while the operational status is active. No public content, page title, or observed phishing payload has been disclosed, leaving the exact lure and victim profile uncertain. Infrastructure analysis reveals a single‑point hosting footprint without additional sub‑domains or ancillary services publicly visible. Defenders should treat the domain as malicious until further evidence proves otherwise: block DNS resolution for www.xcvuull.christmas, add the IP address 47.242.217.10 to network‑level deny lists, and monitor outbound connections for attempts to reach the host. Continuous passive DNS monitoring and periodic re‑query of the name servers are recommended to detect any changes in the hosting environment. Because the domain is newly created, rapid escalation is possible, so security teams should include it in phishing detection rules and educate users about unsolicited communications that reference the domain.