app[.]rousox[.]com

app.rousox.com was observed resolving to the IPv4 address 64.7.198.11. The domain is currently classified as an active generic phishing site with an elevated risk rating. Threat intelligence from PhishDestroy indicates that the domain has been added to its blocklist, and at least one external blocklist also lists the domain. VirusTotal analysis shows that 12 of 91 scanning engines returned a malicious verdict, confirming the presence of phishing‑related payloads.

No additional public evidence such as Safe Browsing, OTX, registrar information, SSL certificate details, HTTP response codes, or trust‑score metrics were available at the time of analysis, and the page title has not been harvested. The limited data set suggests that the infrastructure is modest, relying on a single host address. Defenders should continue to block traffic to 64.7.198.11 and add app.rousox.com to local deny lists.

Network monitoring should flag any DNS queries or HTTP requests to the domain, and email gateways should inspect URLs for this host. Because the domain is actively flagged by multiple vendors, automated detection rules that incorporate the VirusTotal detection count and blocklist status are recommended. Ongoing observation is advised to capture any changes in hosting, SSL deployment, or content that could indicate escalation.