xcvdh67u[.]christmas

The domain www.xcvdh67u.christmas was registered on July 13 2026 via Spaceship, Inc. and is currently pointing to IP 47.242.217.10. Its authoritative name servers are launch1.spaceship.net and launch2.spaceship.net. VirusTotal has recorded detections from seven out of ninety‑one scanned scanners, indicating that multiple security vendors have identified malicious characteristics. The domain is classified as a generic phishing site and remains active. Infrastructure analysis shows a single IPv4 address without known association to benign services, suggesting the host is being used solely for malicious email or credential harvesting campaigns. No additional intelligence such as target brand, payload, or hosting provider beyond the registrar is available. Defenders should block DNS resolution for the domain and the associated IP address at perimeter firewalls and endpoint protection solutions. Email gateways should be updated to flag any messages containing links to the domain, and users should be warned that any login prompts originating from this URL are not legitimate. Continuous monitoring of the IP reputation and of any new indicators from threat‑intelligence feeds is recommended to capture potential expansion of the infrastructure.