imootken[.]top

The domain imootken.top is currently classified as a high‑risk generic phishing infrastructure. Registration records show the domain was created on 15 January 2026 through Gname.com Pte. Ltd., and the authoritative name servers are clarissa.ns.cloudflare.com and kip.ns.cloudflare.com, indicating use of Cloudflare’s DNS service. DNS resolution points to the IP address 188.114.96.3, which remains active at the time of analysis.

The domain is listed on two public security blocklists and has been explicitly blocked by the PhishDestroy and OpenPhish feed providers, reinforcing its malicious status. VirusTotal reports that 17 out of 91 scanned security vendors have flagged the domain, providing additional corroboration from multiple independent scanners. No public page title, SSL certificate details, or HTTP response codes are available in the current intelligence set, so the exact content presented to victims has not been documented.

Defenders should treat imootken.top as hostile: add the domain and its resolving IP to network‑level deny lists, enforce DNS‑based filtering, monitor outbound connections for attempts to contact the IP, and consider sharing the indicator with internal threat‑intel teams. Continuous re‑evaluation is advised, as future changes to hosting or content could alter the threat profile, but the present evidence sufficiently warrants active remediation and strict blocking measures.