msnrou[.]pics

This investigation documents the active generic phishing infrastructure associated with the domain msnrou.pics. The domain was registered on 14 July 2026 through Spaceship, Inc. and is delegated to the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. DNS resolution points to the IPv4 address 47.242.217.10, which remains reachable as of the report date. VirusTotal scans have recorded detections from two of ninety‑one security vendors, indicating that at least a subset of scanners classify the host as malicious. The limited detection count suggests that the payload or phishing kit may be newly deployed or evading broader detection. No additional intelligence on the hosted content, targeted brand, or phishing workflow has been published. Consequently, the certainty of the specific victim‑targeting approach is low, but the presence of a newly created domain, dedicated name servers, and confirmed malicious detections warrants a high risk rating. Defensive recommendations include immediate blocking of msnrou.pics and its resolved IP address at perimeter and endpoint controls, inclusion in threat‑intel feeds, continuous monitoring for DNS or SSL certificate changes, and periodic re‑scanning with multiple AV engines to capture potential evolution of the payload.