Is phase22.co safe?
http://phase22.co/
Coveragepartial2 of 4 applicable core capabilities
phase22.co is a redirect to a design studio portfolio, but the destination's own pages were never fully reviewed and stale antivirus flags remain on record
Visiting phase22.co does not show a site of its own: the browser is automatically forwarded to ph22studio.com, which independent research describes as the portfolio of Phase 22 Creative, a design and illustration studio led by Matthew Jorde in Grand Rapids, Michigan. That is a normal, benign pattern for a rebranded or shortened domain, and the destination's homepage branding matches the studio description. The score is held in the Low Risk band rather than Safe because the site's own contact and policy pages were not read in full, the registrable domain is only 168 days old, and a saved antivirus observation still records adverse results from seven engine families, even though that observation is stale and may predate the current, benign state of the destination.
Be the first to review phase22.co
Used phase22.co? Share your experience
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
Visiting phase22.co does not show a site of its own: the browser is automatically forwarded to ph22studio.com, which independent research describes as the portfolio of Phase 22 Creative, a design and illustration studio led by Matthew Jorde in Grand Rapids, Michigan. That is a normal, benign pattern for a rebranded or shortened domain, and the destination's homepage branding matches the studio description. The score is held in the Low Risk band rather than Safe because the site's own contact and policy pages were not read in full, the registrable domain is only 168 days old, and a saved antivirus observation still records adverse results from seven engine families, even though that observation is stale and may predate the current, benign state of the destination.
The domain forwards to a named creative studio
The only thing phase22.co itself does is redirect. The browser is automatically sent from http://phase22.co/ to https://ph22studio.com/, an unrelated external domain, and no content is served on the original host. A redirect alone is not malicious, but it does mean the visitor never sees the site they typed and should understand that the destination is a separate domain with its own history.
Independent research describes ph22studio.com as the website for Phase 22 Creative, a product-focused design and illustration studio, and the homepage identifies the studio as led by Matthew Jorde and references Grand Rapids, Michigan, with branding suggesting an established creative practice. A visual review of the destination shows the same studio positioning, describing an illustration and design practice exploring old-world grit, outdoor heritage, sport and nostalgia. Together these point to a genuine creative-services portfolio rather than a scam landing page.
Clean encryption and Safe Browsing, but stale antivirus flags and unread pages
The saved TLS check found a valid encrypted connection and the browser threat feed returned no threat warning, so there is no current browser-level or transport-level danger signal. Those results mean no detections were raised, not that the operator has been vetted.
Against that, a saved antivirus observation records adverse results from seven independent engine families, including alphaMountain.ai, BitDefender and Forcepoint ThreatSeeker. That observation is marked stale, so it may reflect an earlier state of the domain or the destination rather than the current one, but it is still on record and cannot be dismissed outright.
The registrable domain is only 168 days old, and the site's own contact details were not reviewed because the page text was not read in full. A young domain with unread contact and policy pages is not evidence of wrongdoing, but it does mean the operator's identity and customer-facing terms remain unverified from the site itself.
What actually happens when you visit
A visitor who opens phase22.co is immediately moved to ph22studio.com without any interaction, so the address in the bar changes and the original domain never displays content of its own.
The destination presents itself as a design and illustration studio portfolio, with a 'Start a Project' style contact path typical of professional creative services rather than a checkout or download flow. No affiliate funnel, order path, subscription trap or payment mechanism appears in the evidence reviewed.
Why the score is 74
The saved checks found no material threat, but the evidence was not strong enough for the highest Safe tier. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
9/ 92
detectionsSaved analysis from October 2, 2026 - stale
9 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 8
- Suspicious
- 1
- Total
- 92
| Engine | Finding |
|---|---|
| alphaMountain.aiMalicious | phishing |
| BitDefenderMalicious | phishing |
| Forcepoint ThreatSeekerMalicious | phishing |
| FortinetMalicious | phishing |
| G-DataMalicious | phishing |
| KasperskyMalicious | phishing |
| LionicMalicious | phishing |
| SophosMalicious | phishing |
| GridinsoftSuspicious | suspicious |
All 92 engine results
- alphaMountain.ai - phishing - Malicious
- BitDefender - phishing - Malicious
- Forcepoint ThreatSeeker - phishing - Malicious
- Fortinet - phishing - Malicious
- G-Data - phishing - Malicious
- Kaspersky - phishing - Malicious
- Lionic - phishing - Malicious
- Sophos - phishing - Malicious
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- LevelBlue - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Unrated
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Phase 22 Creative is an illustration and design studio exploring the collision of old-world grit, outdoor heritage, sport, and nostalgia with the noise of the modern world.
What the captured page showed
1 observation- 01
Phase 22 Creative is an illustration and design studio exploring the collision of old-world grit, outdoor heritage, sport, and nostalgia with the noise of the modern world.
03 · Investigation Story
Investigation story
What the site claims
Phase 22 — Illustration & Design Studio
What we observed
The page content was captured and checked alongside 59 antivirus results.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
2 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
Web research findings
Independent findings for phase22.co, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- PCriskopen
"ph22studio.com appears to be the website for Phase 22 Creative, a product-focused design and illustration studio."
- PCriskopen
"The homepage identifies the studio as being led by Matthew Jorde and references Grand Rapids, Michigan, with branding that suggests an established creative practice."
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainphase22.co
- Redirects toph22studio.com
- Hosted byInternet Utilities Europe and Asia Limited
- Referencesassets.apollo.io
Domain Timeline
- May 9, 2026Domain registered
First appeared in WHOIS records — 5 months old when this review was saved.
- Oct 25, 2026Saved security review — Rated Low Risk
This saved scan found no material threat, but the evidence was not strong enough for the highest Safe tier.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
Domain & Encryption
Redirect Chain
- 1302http://phase22.co/
- 2200https://ph22studio.com/cross-domain
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentpartial
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
7 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The page automatically sent the browser to an unrelated external site. · The page redirected the browser to an unrelated external domain.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 9 of 92 engines flagged | Limited | Adverse | stale fallback · analysed Oct 2, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Page content | Page fetched · HTTP 200 | Limited | No saved finding | this scan · Oct 25, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Independent research | 2 independent findings were saved | Completed | No adverse finding | this scan · Oct 25, 2026 |
- Antivirus
- Result9 of 92 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 2, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionLimited
- FindingNo saved finding
- Freshnessthis scan · Oct 25, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is phase22.co a scam or is it safe?
Is phase22.co safe to use?
Has phase22.co been flagged by antivirus engines?
Is phase22.co on any phishing or malware blacklists?
How old is the phase22.co domain?
Does phase22.co have a valid SSL certificate?
Where is phase22.co hosted?
How often is the phase22.co report updated?
08 · Final Verdict
Final verdict
phase22.co is a redirect to a design studio portfolio, but the destination's own pages were never fully reviewed and stale antivirus flags remain on record
Visiting phase22.co does not show a site of its own: the browser is automatically forwarded to ph22studio.com, which independent research describes as the portfolio of Phase 22 Creative, a design and illustration studio led by Matthew Jorde in Grand Rapids, Michigan. That is a normal, benign pattern for a rebranded or shortened domain, and the destination's homepage branding matches the studio description. The score is held in the Low Risk band rather than Safe because the site's own contact and policy pages were not read in full, the registrable domain is only 168 days old, and a saved antivirus observation still records adverse results from seven engine families, even though that observation is stale and may predate the current, benign state of the destination.
09 · Community