oswrer[.]pics

The domain oswrer.pics was registered on July 19, 2026 through Spaceship, Inc. and is currently resolving to the IPv4 address 47.242.217.10. The authoritative nameservers listed for the zone are launch1.spaceship.net and launch2.spaceship.net, indicating that the registrar’s infrastructure is being used for DNS resolution. As of the report date, July 22, 2026, the domain remains active and appears on a single external security blocklist.

It has also been flagged by the PhishDestroy service, which suggests that known phishing detection mechanisms have identified malicious use. VirusTotal analysis shows that two of ninety‑five scanned security vendors have generated a detection for the domain, confirming that at least a minority of anti‑malware engines consider the host suspicious. No additional public threat intelligence sources such as OTX, Safe Browsing, or SSL/TLS certificate details are presently available for this indicator.

The limited detection footprint—one blocklist entry and two vendor detections—combined with the recent creation date points to a short‑lived phishing campaign that may be targeting users before broader security products update their signatures. Defenders should add oswrer.pics to local deny lists, monitor DNS queries for the associated IP address, and consider proactive blocking at network perimeter devices. Continuous re‑evaluation is advised, as further analysis (e.g., page content, HTTP response codes, or additional vendor scans) may reveal a higher risk profile or confirm the campaign’s scope.