enjoyrestaurante[.]com

This domain, enjoyrestaurante.com, is actively flagged as a high-risk brand impersonation threat targeting the brand 'scroll'. Registered on September 9, 2025, through OVH, SAS, the domain resolves to IP address 134.209.29.145, hosted on AS14061 (DigitalOcean, LLC) in the United Kingdom. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, Nginx, and Cloudways, with jQuery and jQuery Migrate libraries detected. The site returns an HTTP 200 status, indicating operational functionality, and presents a page title of 'Inicio - Enjoyrestaurante', though the exact content and intent remain unverified beyond the known impersonation classification. Nameservers are configured as dns10.ovh.net and ns10.ovh.net, consistent with OVH-managed infrastructure. MX records point to mx1.mail.ovh.net and mx2.mail.ovh.net, suggesting potential email capabilities for phishing or social engineering campaigns. The SSL certificate is issued by Let's Encrypt, providing HTTPS encryption, which may lend an appearance of legitimacy to unsuspecting users. Security blocklists have begun to flag this domain, with one confirmed listing by PhishDestroy and two of 95 security vendors on VirusTotal identifying it as malicious. While the domain's registration age (less than a year old) and hosting on a cloud provider are not inherently suspicious, the combination of brand impersonation, active status, and detection by security vendors warrants immediate defensive action. Defenders should prioritize blocking this domain at the DNS and network levels, monitoring for related email activity, and investigating any user interactions with the site. Further analysis of the site's content and backend behavior is recommended to determine the full scope of the threat.