enosysglobal[.]io

The domain enosysglobal.io is currently active and exhibits characteristics consistent with a high‑risk brand‑impersonation campaign. Registration data show the domain was created on October 08, 2025 through Web Commerce Communications Limited. DNS resolution points to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The authoritative nameservers are elinore.ns.cloudflare.com and renan.ns.cloudflare.com. No SSL certificate is presented, and an HTTP request returns a 403 status code, indicating restricted access to the underlying content. The page title returned by the server is "Ēnosys"; no additional site content has been publicly captured, so the exact nature of the impersonated brand cannot be confirmed beyond the generic classification of brand impersonation. Threat intelligence signals include a Gridinsoft trust score of 0 / 100, detection by six of ninety‑five VirusTotal scanners, appearance on a single security blocklist, and inclusion in one AlienVault OTX pulse. The domain has been blocked by the PhishDestroy mitigation service. Given the high risk rating, defenders should add enosysglobal.io to local blocklists, monitor network traffic for connections to 188.114.96.3, and enforce TLS inspection to capture any hidden payloads that may be delivered after the initial 403 response. Continuous observation of any changes to the HTTP status, SSL deployment, or additional intelligence feeds is recommended to adjust response actions promptly.