# PhishDestroy domain threat record: jhsstudio.com.br Content language: English Canonical HTML report: https://phishdestroy.io/domain/jhsstudio.com.br/ Machine-readable companion: https://phishdestroy.io/domain/jhsstudio.com.br/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-08 00:00:37 UTC - Last availability or vendor check: 2026-10-22 10:37:36 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 5/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 88.222.222.205 - Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND - Last stored HTTP status: 200 - Registration date (registry RDAP, jhsstudio.com.br): 2024-08-14 12:01:09 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a118d2-3638-703f-9edd-8693a717826d/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/jhsstudio.com.br - Certificate Transparency search: https://crt.sh/?q=%25.jhsstudio.com.br - Web Archive lookup: https://web.archive.org/web/*/https://jhsstudio.com.br/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview jhsstudio.com.br presents itself as JHS Studio, a Brazilian supplier of sound and lighting equipment, band crew and DJ services. The Portuguese-language page targets people in Brazil booking gear or staff for shows, parties and events. PhishDestroy classifies it as an impersonation phishing page and first flagged it on 2026-10-08. As of 2026-10-19 the site was still online and serving content. The page title describes an ordinary event-services business, while our classification is impersonation phishing. How the scam works Impersonation pages copy the name, look and offer of a real or plausible business so visitors trust it enough to act. Here the lure is the title "JHS Studio – Equipamentos de som & luz, staff de bandas e DJ", which suits someone urgently arranging equipment or crew for an event. A typical scheme of this kind asks for advance payments or booking deposits, or collects contact, identity and payment details through quote or reservation forms. Victims can lose the money they pay and the personal or card data they submit, and that data can be reused in later fraud. Evidence Five of 92 VirusTotal engines flagged the domain at the 2026-10-19 check: alphaMountain.ai, Forcepoint ThreatSeeker, SOCRadar, Sophos and URLQuery. That is a minority, but these vendors are independent of one another and agree with our verdict. The domain also appears in 33 AlienVault OTX pulses, which shows other researchers have been tracking it. Among the blocklists we track, only PhishDestroy currently lists it. Infrastructure The domain was registered on 2024-08-14, about two years before we detected it. Its age gives it more credibility than a freshly created phishing domain would have. The site is hosted on Hostinger International Limited's network in Lithuania, which has no obvious connection to the Brazilian business it claims to be. Its Let's Encrypt certificate is free and issued automatically, so the browser padlock says nothing about who runs the site. What to do If you paid a deposit or booking fee through this site, contact your bank or card issuer now to dispute the charge, and keep any receipts, chats or invoices. If you entered personal details, watch for follow-up messages that pretend to be from JHS Studio, and do not send further payments or documents. If you created an account or reused a password there, change that password everywhere you used it and turn on two-factor authentication. Before booking event services, confirm the provider through independent channels such as a verified CNPJ, reviews or a phone call. Defenders should block jhsstudio.com.br at DNS and proxy level and report it to Hostinger's abuse team and to the Brazilian registry. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a118d2-3638-703f-9edd-8693a717826d/ VirusTotal report: https://www.virustotal.com/gui/domain/jhsstudio.com.br Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=jhsstudio.com.br Archived copy: https://web.archive.org/web/20261009130830/https://jhsstudio.com.br/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-19 09:29:02 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a118d2-3638-703f-9edd-8693a717826d.png Captured: 2026-10-08 00:05:13 UTC - URLScan capture: https://urlscan.io/screenshots/01a0128a-617a-74da-afee-4384a996ca8a.png Captured: 2026-10-08 00:00:37 UTC Source report: https://urlscan.io/result/01a118d2-3638-703f-9edd-8693a717826d/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/c9d4727b-60eb-47c5-8959-f35f0a8c60fb.png Captured: 2026-10-08 00:04:25 UTC Source report: https://radar.cloudflare.com/scan/c9d4727b-60eb-47c5-8959-f35f0a8c60fb SHA-256: ac2655474f25229a56eea70236a6eae9b02f91e05e7125ed5e824cbcba184d50 - URLScan · 2026-08-18: https://screenshots.phishdestroy.io/us/01a0128a-617a-74da-afee-4384a996ca8a.png Captured: 2026-08-18 01:44:26 UTC Source report: https://urlscan.io/result/01a0128a-617a-74da-afee-4384a996ca8a/ SHA-256: 8fc4e3641480fba50b3db76d41454c90b1e20fdccd0a26a4ac5f9500d318e8ba ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-20T18:41:02Z", "uuid": "01a118d2-3638-703f-9edd-8693a717826d", "scanned_at": "2026-10-08T00:04:03Z", "final_url": "https://jhsstudio.com.br/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://jhsstudio.com.br/", "from": "http://jhsstudio.com.br/", "status": 307 } ], "ip": "145.223.124.168", "ips": [ "145.223.124.168" ], "asns": [ "47583" ], "countries": [ "US" ], "link_domains": [ "api.whatsapp.com", "www.google.com", "www.instagram.com", "matheuspadula.framer.website" ], "social": [ "https://api.whatsapp.com/send", "https://www.instagram.com/jhs_entretenimento", "https://www.instagram.com/studiojhs" ], "doc_hash": "ba7a4406816f07f7f4fe8fc862a93189bba57f81834a744a6f5e9f98a1b9fe95", "globals": [ "litespeed_docref", "lazyLoadOptions", "LazyLoad", "urlCreator", "litespeed_load_delayed_js_force", "litespeed_load_delayed_js", "litespeed_load_one", "litespeed_inline2src", "litespeed_ui_events", "litespeed_vary" ], "tls": { "san": [ "jhsstudio.com.br", "www.jhsstudio.com.br" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "jhsstudio.com.br", "protocol": "TLS 1.3", "valid_to": "2026-11-11T19:45:12Z", "valid_from": "2026-08-13T19:45:13Z" }, "domain_age_days": 2770, "apex_age_days": 2770, "tls_age_days": 55, "tls_valid_days": 89, "requests": 44, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -47, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "hcdn", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.3.33", "content-security-policy": "upgrade-insecure-requests" } }, "cf": { "v": 1, "fetched_at": "2026-10-20T18:49:32Z", "uuid": "c9d4727b-60eb-47c5-8959-f35f0a8c60fb", "scanned_at": "2026-10-08T00:04:25Z", "final_url": "https://jhsstudio.com.br/", "status": 200, "history": [ { "url": "https://jhsstudio.com.br/", "status": 200 } ], "dom_hash": "685e69820366992b070841f5085eb32180711a1a7771017b1c329a8c4561556b", "doc_hash": "ba7a4406816f07f7f4fe8fc862a93189bba57f81834a744a6f5e9f98a1b9fe95", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "jhsstudio.com.br", "type": "A", "value": "84.32.84.2" }, { "name": "jhsstudio.com.br", "type": "A", "value": "2.57.91.62" }, { "name": "jhsstudio.com.br", "type": "AAAA", "value": "2a02:4780:84:fea8:57fd:7a0f:ad04:6e1a" }, { "name": "jhsstudio.com.br", "type": "AAAA", "value": "2a02:4780:84:962d:cbf7:17bb:e4f5:7c1f" } ], "dnssec_valid": false, "ip": "84.32.84.2" }, "vt": { "v": 1, "fetched_at": "2026-10-21T07:31:52Z", "analysis_at": "2026-10-19T02:01:09Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 4, "suspicious": 1, "undetected": 31 }, "detections": { "Sophos": "malware", "SOCRadar": "phishing", "URLQuery": "suspicious", "alphaMountain.ai": "malicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "spyware and malware", "BitDefender": "porn", "alphaMountain.ai": "Malicious (alphaMountain.ai)", "Forcepoint ThreatSeeker": "phishing and other frauds. blogs and personal sites" }, "expires": "2028-08-14T00:00:00Z", "first_seen": "2023-10-05T12:48:48Z", "dns": [ { "ttl": 3600, "type": "TXT", "value": "v=spf1 include:_spf.mail.hostinger.com ~all" }, { "ttl": 21600, "type": "NS", "value": "hermes.dns-parking.com" }, { "ttl": 3600, "type": "SOA", "rname": "dns.hostinger.com", "value": "hermes.dns-parking.com" }, { "ttl": 60, "type": "AAAA", "value": "2a02:4780:4b:d62e:6ead:5bf5:cb7a:d7f3" }, { "ttl": 14400, "type": "MX", "value": "mx2.hostinger.com", "priority": 10 }, { "ttl": 21600, "type": "NS", "value": "artemis.dns-parking.com" }, { "ttl": 60, "type": "AAAA", "value": "2a02:4780:4c:964b:a3f8:a641:5d8e:bee9" }, { "ttl": 60, "type": "A", "value": "88.223.87.235" }, { "ttl": 14400, "type": "MX", "value": "mx1.hostinger.com", "priority": 5 }, { "ttl": 60, "type": "A", "value": "147.79.72.177" } ], "dns_at": "2026-10-19T02:01:23Z", "jarm": "27d40d40d00040d00042d43d000000e1ea2a807a629b496b664cf07ad7c08d", "cert": { "san": [ "jhsstudio.com.br", "www.jhsstudio.com.br" ], "issuer": "Let's Encrypt / YE2", "serial": "69cc2892c62d7ff4e9a6a0372e8ac9fc747", "sha256": "82c3595dba7f466e49b9a56963cae58d1a75d8ff1b464c604f68f96b03f6541e", "subject": "jhsstudio.com.br", "valid_to": "2027-01-10T18:57:42Z", "valid_from": "2026-10-12T18:57:43Z" } } } ```