enssssex9[.]com

The domain enssssex9.com has been identified as a phishing infrastructure targeting users through fraudulent AI-driven romance chat services. Analysis indicates this domain operated under the guise of a platform named 'LOVESCAPE,' promising users the ability to 'Create Your AI Girlfriend for Chatting.' The threat type is classified as generic phishing with an elevated risk level, primarily designed to deceive users into disclosing sensitive information or making unauthorized payments. As of the latest assessment, the domain has been taken offline, though residual risks may persist through cached or redirected content. Infrastructure analysis reveals the domain was registered on March 22, 2026, through Dynadot Inc, a registrar frequently associated with high-risk domains. It resolved to the IP address 43.229.114.203, a host previously linked to other malicious activities. Detection metrics show the domain was flagged by 11 of 95 security vendors on VirusTotal, with additional listings on two security blocklists. The SSL certificate was issued by Let's Encrypt, a common tactic to lend superficial legitimacy to phishing sites. The combination of a recent registration date, low detection thresholds, and the use of a widely trusted certificate authority underscores the domain's deceptive design. Current status confirms enssssex9.com is offline, though users should remain vigilant against similar schemes. Organizations and individuals are advised to block the domain and its associated IP (43.229.114.203) at the network level. Users who interacted with the site should immediately reset credentials for any accounts accessed during the exposure window and monitor financial statements for unauthorized transactions. Security teams are recommended to review logs for connections to the domain or IP, particularly from March 2026 onward, and update detection rules to include this infrastructure in future threat intelligence feeds.