enma.lol

enma.lol received a Caution verdict from ScamSandbox, with a risk score of 20/100. This means the site is not definitively dangerous but shows some characteristics that warrant extra care before entering passwords, payment details, or personal data.

ScamSandbox assigned enma.lol the verdict "Caution" based on a weighted combination of signals including:

• Hidden WHOIS registration details — the owner's identity is concealed
• HTTP security headers grade F — none of the standard browser protections are implemented
• No privacy policy found — required by law in most countries for sites collecting user data
• No contact information found — legitimate businesses publish verifiable contact details
• Shared hosting environment — the server IP is shared with 50 other domains
• Overall risk score of 20/100 after weighing all signals

Note: ScamSandbox uses automated analysis — while these signals indicate elevated risk, they do not constitute definitive proof of fraud. Always verify independently before drawing final conclusions.

ScamSandbox performs a multi-layered automated analysis of enma.lol in real time, querying 20 independent security sources simultaneously. The process includes:

• Blacklist checks — VirusTotal, Google Safe Browsing, PhishTank, URLhaus, and AbuseIPDB
• WHOIS and domain intelligence — registration date, registrar, registrant country, privacy status
• SSL/TLS analysis — certificate validity, issuer, and expiration
• DNS record analysis — A, MX, NS records, SPF and DMARC email security configuration
• HTTP security headers — Content-Security-Policy, X-Frame-Options, HSTS, and other browser security directives
• Content analysis — detection of login forms, payment forms, urgency language, and suspicious content patterns
• Community intelligence — mentions on Reddit, scam-reporting forums, and user-submitted reports
• Infrastructure analysis — hosting provider, IP geolocation, reverse IP lookup, and typosquatting detection

Based on public WHOIS records, enma.lol was registered on 2025-04-07T12:49:19 through NAMECHEAP INC. The registrant's identity is protected by a WHOIS privacy service, which means the true owner's name, address, and contact details are not publicly available. While WHOIS privacy is also used by legitimate site owners who want to avoid spam, it is also commonly used by fraudulent operators to hide their identity.

The site's server is operated by Cloudflare, Inc. . The hosting provider is separate from the domain registrar and does not necessarily identify the person who controls the website.

Yes. If you have personally experienced fraud, phishing, or deceptive practices from enma.lol, you can submit a community report directly on this page using the "Submit a Report" button in the Community Reports section above. Your report helps other users make informed decisions and contributes to our threat intelligence database.

You can also report the site to official authorities:

• Google Safe Browsing — report phishing at safebrowsing.google.com/safebrowsing/report_phish/
• PhishTank — submit phishing URLs at phishtank.org
• FTC (US) — file a complaint at reportfraud.ftc.gov
• Action Fraud (UK) — report at actionfraud.police.uk
• DGCCRF (France) — report at signal.conso.gouv.fr