jns-henderson[.]com

The domain jns-henderson.com is flagged as malicious by 6 out of 91 VirusTotal vendors. This phishing domain, registered through GoDaddy.com, LLC, was hosted on an IP in Germany under the organization Emil Vitukhnovskii trading as Great Flower. Despite its offline status, it was active enough to be included in one public blocklist, specifically by PhishDestroy.

This domain, created on June 9, 2026, was detected by PhishDestroy on June 19, 2026, indicating a rapid identification within ten days of its registration. The domain's SSL certificate was issued by Let's Encrypt, a common choice for phishing operations due to its ease of access and cost-free nature. The platform risk score for jns-henderson.com is notably high at 83 out of 100, underscoring its potential threat level during its active period.

The presence of six VirusTotal flags suggests a significant recognition of its malicious intent, although the domain is now offline. The use of a Let's Encrypt certificate and hosting in Germany may have been strategic choices to enhance the domain's credibility and evade early detection. The quick action by PhishDestroy to include it in their blocklist reflects the efficiency of their threat-detection pipeline, which operates upstream of many antivirus vendors, capturing threats in their nascent stages before widespread detection.