The scan of www.jbs.com on 22 Aug 2026 reached no verdict either way (score 10). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with www.jbs.com?

1 analysed samples communicate with this URL.

How was www.jbs.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.jbs.com - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned www.jbs.com and returned a unknown verdict (score 10), categorised as credential-harvest. The page resolved to 34.149.87.45 on Google LLC in US. The domain was registered 10581 days ago through GMO Internet Group, Inc. d/b/a Onamae.com. 9 domains and 2 IPs were contacted, over 11 HTTP requests. 1 malware sample communicates with this URL. The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 10) · Confidence 19%
Scanned URL: https://jbs.com/
Domain: www.jbs.com · IP: 34.149.87.45 · AS396982 · US
Server: Pepyaka
Page title: Business consultant | JBS USA | California
HTTP status: 200 · text/html; charset=UTF-8
Registrar: GMO Internet Group, Inc. d/b/a Onamae.com · domain age 10581 days · created 1997-09-02
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 12 18: · subject CN=jbs.com
HTTP requests captured: 11
Scan tier: fast · observed 2026-08-22 19:42:02 UTC

Redirect chain

https://jbs.com/
https://www.jbs.com/

Malware communicating with this URL (1)

These samples were observed contacting or being served from www.jbs.com. Each links to its full analysis.

6346d3c6b38dcc3b9b33369031a61507490bdc95a469f352accabd09e39e56d2 - referenced · 6346d3c6b38dcc3b9b33369031a61507 · first seen 2026-08-22

Antivirus & YARA (1 of 48 engines)

YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)

These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.

Why this verdict

Valid TLS, no impersonation or off-origin credential post
A signature matched text in the page (DLV_HTML_Smuggling) — pages that discuss malware can match, so this alone is not a malicious verdict
Credential-harvesting form

Detected technologies

Fastly
Wix

Contacted infrastructure

34.149.87.45 - AS396982 Google LLC (United States)
23.236.62.147 - AS396982 Google LLC (United States)

Observed indicators

www.jbs.com
static.wixstatic.com
static.parastorage.com
www.jbs.co.jp
shanghai.jbs.co.jp
www.jbs.com.sg
www.jbs.mx
siteassets.parastorage.com
browser.sentry-cdn.com
34.149.87.45
23.236.62.147
https://www.jbs.com/
https://static.wixstatic.com/ficons/ee12da_de762ccceb164665a38099e9bf3d6d05%7Emv2.ico
https://static.parastorage.com/unpkg/@formatjs/intl-segmenter@11.7.10/polyfill.iife.js
https://static.parastorage.com/unpkg/core-js-bundle@3.2.1/minified.js
https://static.parastorage.com/unpkg/focus-within-polyfill@5.0.9/dist/focus-within-polyfill.js
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt_bootstrap.41d0ffd5.min.css
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt[HeaderContainer_DefaultWithFillLayers].ce8f195b.min.css
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt_bootstrap-classic.95bff5e0.min.css
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt_bootstrap-responsive.4e8a21db.min.css

Questions about www.jbs.com

Is www.jbs.com safe?: The scan of www.jbs.com on 22 Aug 2026 reached no verdict either way (score 10). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with www.jbs.com?: 1 analysed samples communicate with this URL.
How was www.jbs.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.jbs.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan