rnohphmo[.]imtcken[.]com

Domain rnohphmo.imtcken.com is currently listed as an active generic phishing site with an elevated risk rating. VirusTotal records show that 20 out of 91 scanning engines have flagged the domain as malicious, indicating a moderate consensus among security vendors. Independent phishing intelligence feeds, PhishDestroy and OpenPhish, have both added the domain to their blocklists, and it also appears on two additional security blocklists, reinforcing its classification as a threat.

The available data does not disclose registrar information, hosting IP addresses, or TLS certificate details, limiting deeper infrastructure analysis. No public page title or brand targeting information has been released, so the specific lure employed by the site cannot be confirmed at this time. Given the confirmed detections and blocklist presence, defensive operators should enforce network‑level blocking of rnohphmo.imtcken.com, include it in endpoint allow‑list exclusions, and monitor DNS query logs for related lookups.

Automated URL filtering solutions that incorporate the PhishDestroy and OpenPhish feeds will already capture the domain, but organizations employing custom filtering should update their rulesets promptly. Continuous re‑evaluation is advised, as further indicators such as IP resolution, SSL fingerprint, or page content may emerge and adjust the threat posture.