enatimedia[.]com

Analysis of the domain enatimedia.com indicates active malicious infrastructure classified under generic phishing with a high-risk designation. As of July 12, 2026, the domain resolves to the IPv4 address 178.236.38.1, geolocated in Great Britain and associated with the ASN Ipv4superhub. The server returns an HTTP 301 redirect, though the destination page displays an 'ERROR 404 - Not Found!' title, suggesting either a placeholder or obfuscated landing page. SSL certification is provided by Let's Encrypt (YR1), a common choice for both legitimate and malicious domains due to its low-cost automation. The domain is currently blocked by three security vendors—PhishDestroy, MetaMask, and SEAL—and appears on three distinct blocklists. Ten out of ninety-one security vendors on VirusTotal flag enatimedia.com as malicious, reinforcing its classification as a threat. Infrastructure analysis reveals the use of Nginx as the web server, alongside technologies such as Lightbox, jQuery, HSTS, and HTTP/3, which are not inherently malicious but are frequently leveraged in phishing campaigns for perceived legitimacy or performance optimization. Registration details point to NAMECHEAP INC as the registrar, a common platform for both benign and malicious domain registrations. The domain has been identified in two AlienVault OTX threat intelligence pulses, further corroborating its association with phishing activity. Gridinsoft assigns a trust score of 0/100, indicating no confidence in its legitimacy. While the exact phishing target or brand impersonation remains unconfirmed due to the lack of visible content, the domain’s infrastructure, blocklist presence, and detection metrics align with credential theft or generic phishing operations. Defenders should treat this domain as hostile, block resolution at the network level, and monitor for connections or redirects involving 178.236.38.1.