incometacin[.]top

Incometacin.top was registered on 25 May 2026 through Gname.com Pte. Ltd. The domain resolves to the IPv4 address 206.119.189.113. VirusTotal has recorded 11 detections out of 95 scanned engines, indicating that a notable portion of security products flag the host as malicious. The domain is currently active and classified as a high‑risk generic phishing infrastructure. No public page content or brand targeting has been disclosed, so the exact credential‑stealing payload or impersonated service remains unknown. Infrastructure analysis suggests a freshly created domain used for short‑term phishing campaigns, consistent with the rapid deployment pattern observed in other 2026 threats. Defenders should block outbound connections to 206.119.189.113, add www.incometacin.top to URL filtering and email security block lists, and monitor DNS logs for lookups of the domain. Incident response teams should treat any credential submissions to this host as potentially compromised and advise users to change passwords if they suspect exposure.