# jorvanico.com Warning Page Showing System Updating Notice | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/jorvanico.com/ Machine-readable companion: https://phishdestroy.io/domain/jorvanico.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-29 21:34:48 UTC - Last availability or vendor check: 2026-11-01 23:33:54 UTC - Stored record updated: 2026-11-01 23:33:54 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: flagged ## Stored infrastructure - Observed IP address: 104.16.211.68 - Registrar in stored WHOIS data: GMO Internet Group, Inc. d/b/a Onamae.com - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-09-15 00:57:33 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a18996-7cd8-746b-9f0b-dd86a6637dfd/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/jorvanico.com - Certificate Transparency search: https://crt.sh/?q=%25.jorvanico.com - Web Archive lookup: https://web.archive.org/web/*/https://jorvanico.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy describes the jorvanico.com warning page, which displays a masked brand and a system updating notice. The captured jorvanico.com page is a warning screen with the HTML title "Warning - L***L". It shows a masked brand mark, "L***L", centered above the single line "System Updating [Hosting]." No form, link, or other control is visible, so the page presents only a status message rather than an interactive prompt. The capture shows no interactive elements at all, meaning the page's only visible content is the masked brand text and the updating notice. The stored VirusTotal domain result reports 18 detections out of 92 engines. CRDF reported "malicious"; DNS8 reported "suspicious". Package revision: 6cfa3b457e7745a5196d1b23626a88db2a78ebc63924b211916ef879fff56e1b Text generated (not scan time): 2026-10-30 01:07:27 Reviewed evidence snapshot: {"domain":"jorvanico.com","screenshot_available":true,"page_title":"Warning - L***L","virustotal":{"detections":18,"engines":92,"malicious":15,"suspicious":3,"retrieved_date":"2026-10-30","analysis_date":"2026-10-25","flagging_vendors":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Google Safe Browsing","Forcepoint ThreatSeeker"],"vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"malware","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Google Safe Browsing":"phishing","Forcepoint ThreatSeeker":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-29T21:36:59Z","final_host":"jorvanico.com","captured_on":"2026-10-29"},"virustotal_public_summary":"The stored VirusTotal domain result reports 18 detections out of 92 engines. CRDF reported \"malicious\"; DNS8 reported \"suspicious\".","page_paragraph_target_characters":517} Source facts (timestamps as stored): {"record_id":1708688,"first_recorded_at":"2026-10-29 22:34:48","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":18,"denominator":92,"malicious":15,"suspicious":3,"vendors":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"malware","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Google Safe Browsing":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-25T06:36:29Z","checked_at":"2026-10-30 01:07:07","fetched_at":"2026-10-30T00:07:06Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":18,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Google Safe Browsing","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-10-25 06:36:29","checked_at":"2026-10-30 01:07:07","fetched_at":"2026-10-30 00:07:07","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"flagged","verdict":1,"checked_at":"2026-11-01 12:01:04"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-30 00:30:33"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-02 00:33:54"}} ## Stored page captures - Stored capture: https://i.ibb.co/bRywG0SZ/2a5a433c2dec.png - URLScan · 2026-10-29: https://screenshots.phishdestroy.io/01a18996-7cd8-746b-9f0b-dd86a6637dfd.png Captured: 2026-10-29 21:36:09 UTC Source report: https://urlscan.io/result/01a18996-7cd8-746b-9f0b-dd86a6637dfd/ - URLScan · 2026-09-18: https://screenshots.phishdestroy.io/us/01a0b5f0-c07a-753b-bd30-fe1175c1694d.png Captured: 2026-09-18 19:14:16 UTC Source report: https://urlscan.io/result/01a0b5f0-c07a-753b-bd30-fe1175c1694d/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-09-17: https://screenshots.phishdestroy.io/us/01a0b162-8efe-772b-a57f-d9771c6059dc.png Captured: 2026-09-17 22:00:26 UTC Source report: https://urlscan.io/result/01a0b162-8efe-772b-a57f-d9771c6059dc/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-09-18: https://screenshots.phishdestroy.io/us/01a0b3f0-ed4d-757b-893f-993e26d052e1.png Captured: 2026-09-18 09:55:13 UTC Source report: https://urlscan.io/result/01a0b3f0-ed4d-757b-893f-993e26d052e1/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-10-29: https://screenshots.phishdestroy.io/us/01a1899c-70fd-770c-b538-6b795629046d.png Captured: 2026-10-29 21:41:39 UTC Source report: https://urlscan.io/result/01a1899c-70fd-770c-b538-6b795629046d/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/65c22d18-f9f7-44b9-983c-7c88ee087f5f.png Captured: 2026-10-29 21:36:59 UTC Source report: https://radar.cloudflare.com/scan/65c22d18-f9f7-44b9-983c-7c88ee087f5f SHA-256: baf2cb44963030941557fb721c552d4bca8f87a2d3a1c552a0be3367f2dd9d4b ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-29T21:39:05Z", "uuid": "01a18996-7cd8-746b-9f0b-dd86a6637dfd", "scanned_at": "2026-10-29T21:36:09Z", "final_url": "https://jorvanico.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://jorvanico.com/", "from": "http://jorvanico.com/", "status": 307 } ], "ip": "104.16.211.68", "domains": [ "fonts.gstatic.com" ], "ips": [ "172.253.62.94", "104.16.211.68" ], "asns": [ "15169", "13335" ], "countries": [ "US" ], "doc_hash": "5b1295f2ecc08ed4bca4947288d8c86a2c756695536bee42237aa44d15486277", "script_hashes": [ "116d7eeeacf08918407986499b576a062c4e87e66cf943c9cca02b781d583b25" ], "globals": [ "_jorvanicocom_", "_BBCFCEC_", "themeConfig", "shop_theme", "storeConfig", "shop_config", "lang", "shop_lang", "C_SETTINGS", "_GET_C_SETTING_", "oemcart_client_browser", "oemcart_current_template", "oemcart_store_id", "oemcart_user_id", "oemcart_time_zone", "oemcart_page_ca", "oemcart_user_email", "oemcart_pv_id", "oemcart_data_from", "oemcart_user", "oemcart_currency", "oemcart_currency_code", "oemcart_currency_rate", "oemcart_currency_lcoin", "oemcart_currency_rcoin", "oemcart_currency_decimal", "oemcart_base_currency", "oemcart_base_currency_code", "oemcart_base_currency_rate", "oemcart_base_currency_lcoin", "oemcart_base_currency_rcoin", "oemcart_base_currency_decimal", "oemcart_website_domain", "oemcart_real_domain", "oemcart_site_type", "oemcart_client_country", "oemcart_protocal_type", "oemcart_website_language", "oemcart_utm_source", "oemcart_utm_medium" ], "cookies": [ "_aihgea_vid", "_aihgea_cvid", "_aihgea_vs", "utm_source", "utm_medium", "order_utm_history", "landing_page", "_aihgea_ka", "first_http_referer", "first_visit_time", "PHPSESSID", "__cf_bm" ], "tls": { "san": [ "jorvanico.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "jorvanico.com", "protocol": "TLS 1.3", "valid_to": "2026-12-14T03:01:09Z", "valid_from": "2026-09-15T02:01:11Z" }, "domain_age_days": 44, "apex_age_days": 44, "tls_age_days": 44, "tls_valid_days": 90, "requests": 10, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-29T21:39:08Z", "uuid": "65c22d18-f9f7-44b9-983c-7c88ee087f5f", "scanned_at": "2026-10-29T21:36:59Z", "final_url": "https://jorvanico.com/", "status": 200, "history": [ { "url": "https://jorvanico.com/", "status": 200 } ], "dom_hash": "c2bef41e4b79f40ddbd1dd3c126b116b4d6fc79f58e379fa050a74328b92ab18", "doc_hash": "7f4aaf8956cadb4c5300574ddc7138bf4e28ca6730597afdc071f364abcee11e", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "jorvanico.com", "type": "A", "value": "104.16.211.68" } ], "dnssec_valid": false, "ip": "127.0.1.13", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "created": "2026-09-15T02:57:33Z", "updated": "2026-09-15T06:35:27Z", "expires": "2027-09-15T02:57:33Z", "nameservers": [ "a12.share-dns.com", "b12.share-dns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-30T00:07:06Z", "analysis_at": "2026-10-25T06:36:29Z", "stats": { "timeout": 0, "harmless": 42, "malicious": 15, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "malware", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Google Safe Browsing": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "created": "2026-09-15T02:57:33Z", "expires": "2027-09-15T02:57:33Z", "updated": "2026-09-15T06:35:27Z", "first_seen": "2026-09-15T04:29:18Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "a.share-dns.com" }, { "ttl": 21600, "type": "NS", "value": "b.share-dns.net" }, { "ttl": 600, "type": "SOA", "rname": "master.share-dns.com", "value": "a.share-dns.com" }, { "ttl": 600, "type": "A", "value": "104.16.211.68" } ], "dns_at": "2026-10-25T06:41:53Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "jorvanico.com" ], "issuer": "Google Trust Services / WE1", "serial": "d6be31cf27503ad0e42ac2cf7982ee", "sha256": "8d60614b278b3667be226ef0473d84a99c4c7042f5b9c65f054d5c77a4650581", "subject": "jorvanico.com", "valid_to": "2026-12-14T03:01:09Z", "valid_from": "2026-09-15T02:01:11Z" }, "whois": { "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "registrar_iana_id": "49", "registrar_url": "https://internet.gmo/", "created": "2026-09-15T02:57:33Z", "updated": "2026-09-15T06:35:27Z", "expires": "2027-09-15T02:57:33Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "a12.share-dns.com", "b12.share-dns.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-09-14T15:00:00Z", "last changed": "2026-09-15T06:35:27Z", "registration": "2026-09-14T17:57:33Z", "registrar expiration": "2027-09-14T15:00:00Z", "last update of RDAP database": "2026-10-19T05:55:39Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-29T21:39:22Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "jorvanico.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-09-15T13:32:32Z", "first": "2026-09-15T13:32:32Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 1104 }, "social_tags": { "title": "500 Internal Server Error", "robots": "noindex, nofollow" }, "trackers": { "requests": 6, "trackers": [ { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 126, "tls": 11, "wait": 190, "connect": 6, "download": 0 }, "response_ms": 333 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 219, "co2_grams": 0, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "162.159.27.88", "host": "b.share-dns.net" }, { "ip": "172.64.53.25", "host": "a.share-dns.com" } ], "zone": "jorvanico.com" }, "cookies": { "cookies": [ { "name": "_aihgea_vid" }, { "name": "_aihgea_cvid" }, { "name": "_aihgea_vs" }, { "name": "utm_source" }, { "name": "utm_medium" }, { "name": "order_utm_history" }, { "name": "landing_page" }, { "name": "_aihgea_ka" }, { "name": "first_http_referer" }, { "name": "first_visit_time" }, { "name": "PHPSESSID", "session": true }, { "name": "__cf_bm", "secure": true, "http_only": true, "same_site": "None" } ] }, "location": { "ip": "104.16.211.68", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "jorvanico.com" }, "dns": { "A": [ "104.16.211.68" ], "NS": [ "a.share-dns.com", "b.share-dns.net" ], "SOA": "{\"nsname\": \"a.share-dns.com\", \"hostmaster\": \"master.share-dns.com\", \"serial\": 1789441124, \"refresh\": 3600, \"retry\": 1200, \"expire\": 86400, \"minttl\": 600}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "104.16.211.68", "family": 4 }, "redirects": { "chain": [ "https://jorvanico.com" ] }, "whois": { "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "created": "2026-09-15T02:57:33Z", "updated": "2026-09-15T06:35:27Z", "expires": "2027-09-15T02:57:33Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "a12.share-dns.com", "b12.share-dns.net" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } } } } ```