jkuil[.]christmas

The domain jkuil.christmas is currently active and has been classified as a generic phishing operation with a high risk rating. It was registered on July 04, 2026 through Spaceship, Inc. and is served by the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. DNS resolution points to the single IPv4 address 47.242.217.10. VirusTotal analysis shows that one of ninety‑one security vendors flagged the domain, indicating at least minimal detection of malicious activity. The domain also appears in a single AlienVault OTX threat pulse, confirming that it has been observed by external threat intel sources. At present, the only concrete evidence consists of the registration metadata, name server configuration, IP address, and the limited detection signals from VirusTotal and OTX. No additional information about the hosted content, payloads, or targeted brands has been disclosed, leaving the exact phishing vector and victim profile uncertain. Defenders should prioritize blocking jkuil.christmas at the DNS and network layers, add the associated IP 47.242.217.10 to deny lists, and monitor for any related activity in network logs. Continuous re‑evaluation is advised, as further analysis or additional detections could refine the threat profile.