enrichsupplies[.]com

Analysis of the domain enrichsupplies.com indicates active brand impersonation activity as of July 12, 2026. The domain was registered on April 13, 2026, through Tucows Domains Inc. and currently resolves to the IP address 199.79.63.251, hosted in the United States. Infrastructure analysis reveals nameservers ns1.bh-20.webhostbox.net and ns2.bh-20.webhostbox.net, a configuration commonly associated with low-cost hosting environments exploited for phishing operations. The domain presents an HTTP 200 status code, suggesting an active web server, though the page title 'Not Acceptable!' may indicate either a misconfiguration or an attempt to evade automated detection systems. The SSL certificate is issued by Let's Encrypt, a pattern observed in both legitimate and malicious domains due to its free and automated issuance process. Detection metrics show that 14 of 94 security vendors on VirusTotal have flagged this domain, while independent threat intelligence sources such as PhishDestroy and PhishingDB have already blocked it. The domain appears on two security blocklists, and its Gridinsoft trust score is 0/100, further supporting its classification as high-risk. The scam type is explicitly categorized as brand impersonation, though the specific brand being targeted is not yet confirmed in available data. Defenders are advised to treat this domain as actively malicious and implement blocking measures at the network and endpoint levels. Given its recent registration and continued activity, monitoring for related domains registered through the same registrar or resolving to the same IP range may help identify additional threats. No evidence currently suggests the use of a known phishing kit, and the exact content of the site remains unanalyzed. Further investigation into the hosting provider and associated infrastructure is recommended to assess the full scope of this campaign.