cxvsdg[.]christmas

Analysis indicates that cxvsdg.christmas resolves to the IPv4 address 47.242.217.10, which geolocates to Hong Kong. The domain is hosted on nameservers launch1.spaceship.net and launch2.spaceship.net, both associated with the registrar Spaceship, Inc. An HTTP GET returns status code 200, confirming that a web service is actively responding. The domain appears on one public blocklist and is actively blocked by the PhishDestroy feed, which classifies it as a phishing vector. VirusTotal scans have resulted in nine of ninety‑one security vendors flagging the domain as malicious, reinforcing the suspicion of malicious activity. The threat is catalogued as generic phishing with a high risk rating and remains active as of the report date. No additional technical artifacts such as malware hashes, command‑and‑control endpoints, or phishing page content have been released, leaving the exact lure and credential‑harvesting methodology unknown. Defenders should block DNS resolution to cxvsdg.christmas, add the IP address 47.242.217.10 to network‑level deny lists, and ensure that any inbound or outbound traffic to the associated nameservers is inspected or dropped. Continuous monitoring of the IP reputation and periodic rescans on VirusTotal are advised to capture potential changes in detection status.