{"report_id":"2929765f-ba20-4332-b8bd-847ef9e6b017","version":0,"status":"done","tags":[],"date":"2026-08-30T02:34:33Z","url":{"schema":"http","addr":"orivstrongholds.com/","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"104.21.25.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"orivstrongholds.com/","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"title":"Oriv Strongholds","dom":{"size":130190,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2389)","md5":"50552af0318a4fc0da4daf0d67830884","sha1":"2906fb949ca41a8c034702d97b26eb0cdbb08755","sha256":"cb4cb2f504cfe78760b2f69bef58e678e594618c01a1deedf265172b43f4499f","sha512":"bea5e9eefad2eed3c2e006b7b2d4a3b3f1021f45d0a6e253f63f082f98049698819b26779b38c7b674ea305388959adbcff5e6c8bb18fb293d39ceb9aabda220","ssdeep":"3072:/7EYJxxx59/qa8TAmJs2V60t0P050/0i3qBfQWxt490sRoMkBYmY060Rf/fAoWZC:zE3rt","tlshash":"0bd3ca5151e21209a243d0c0fea69f496b64c107c20a8c6c77ef3962ef8fd75ad3b7a5","dom_hash":"domhash8e77036789200e3768dd949793bb19ff","first_seen":"2026-08-30T02:34:42.253605Z","last_seen":"2026-08-30T02:34:42.253605Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"orivstrongholds.com/","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"104.21.25.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-04T02:34:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-08-28T05:43:07.341812Z","alert_count":0,"request_count":2,"received_data":25363,"sent_data":1030,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.chatwoot.com","ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2016-10-19","domain_rank":359908,"first_seen":"2019-07-08T14:18:07Z","last_seen":"2026-08-21T17:42:07.341885Z","alert_count":0,"request_count":11,"received_data":38305,"sent_data":7933,"comment":"","tags":null,"fingerprints":[{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"prod-chatwoot-assets.s3.amazonaws.com","ip":{"addr":"16.182.39.169","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":972039,"first_seen":"2021-07-09T10:19:03Z","last_seen":"2026-08-23T22:25:40.811528Z","alert_count":0,"request_count":1,"received_data":24604,"sent_data":1016,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":7,"received_data":253234,"sent_data":4030,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d3smg0hrzo6i7w.cloudfront.net","ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2024-08-02T11:22:36Z","last_seen":"2026-08-27T07:23:12.245742Z","alert_count":0,"request_count":17,"received_data":2594230,"sent_data":8680,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"orivstrongholds.com","ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-02","domain_rank":0,"first_seen":"2026-08-30T02:34:36.541782Z","last_seen":"2026-08-30T02:34:36.541782Z","alert_count":100,"request_count":50,"received_data":1737015,"sent_data":61127,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":3,"received_data":105430,"sent_data":1746,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/utils.esm-qHqIGgqd.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3efb84c8441810ceeded70f3c74decdc","sha1":"5c74be20850da2cb8fab68a4acb188da6e2d0cee","sha256":"88c1088ef412028b21ac991820d2a4b43b9e53addae291a5a25f805240c2535c","sha512":"d3fd14707b29b6bdeaf6b1a7c98b0d53f2a1a9098237a29c514cfa7e474c5e31bdf59e6eabe83c631480f0d68c1f9d0a0091d1a096ef4ea9a86512646fca80cb","ssdeep":"1536:vsvrgLVpQTsYfnsNccuLticPAbPAZPApfijNp+gc515Ec5T:vsvrgpQTg+ZL9AjAZA1ijY","tlshash":"8b831ac67191e1ad03b920a094b7030db2fc5948acc9d89de5b9dcda3a64c4971e3bdf","size":85439,"data":"","first_seen":"2026-08-19T00:04:38.3938Z","last_seen":"2026-08-30T02:34:42.361256Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q#/","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2b343b168320288e1c428304c3f4747b","sha1":"1b9b21cc1acd22768b0a077f324ab47e09a19c73","sha256":"953e98ed5735da32bcc2af806b1b7cacbceea2540c5bdb4c9a79c16d2cd401d6","sha512":"e73592c87613a5bebc285e6c4588a8310dcd81519954aa8084ba305dd609c95f9737f5957f89553275abb5e37f6a67ab5866b8bc7da7680cb1fa3e7ad523db46","ssdeep":"","tlshash":"e3c08cc5a0c22d219606665110ef36e49034402671881b02ac94d84c2e220b48233fd8","size":151,"data":"","first_seen":"2024-10-25T14:46:12.053326Z","last_seen":"2026-08-30T02:34:42.409789Z","times_seen":1804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/wow.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed4b12ef0f7e4bf5d5ff3555d18718cb","sha1":"258fa26dec8fcf4769d49eaca6712ef56923673e","sha256":"3162b6468674133d7b6c903e4b8a06f7faf51216d1e7f8b3edc8f326b1bfe461","sha512":"40d8f96697d393a5301d2960394cbea52ea64330a8b706a0982e9b17176bfc0d55394dd4f0fbea2cd1798c938e66ccccc671d803b2802f8b37c2c41f40c1200a","ssdeep":"96:xrZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:xry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"17f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","size":8183,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-08-30T04:54:51.777285Z","times_seen":2657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/widget-Cxg5VsaY.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"33eb12b2cb8fd06d70d322f8a17bfb07","sha1":"3003b05fe02ff0785eb1100f7c74ef9db5c10019","sha256":"fa8ec13fce84048518368dd4ca00365a52b3879d959da063cee81e3270dc2dc4","sha512":"773256222cf9446c123aa1014395793115695de5d9e3baf385a6d9d5732772e651f8851f1d7f9089e2b73234af5a6f7f3b1c3f6790d71b032522cae45a710b80","ssdeep":"1536:4ebu0tS1nvNl2OVHk9aGQlSHlWPwoLRfQE++qkhk7ZofOhx:4eSAQlSHlWl1HDS","tlshash":"07934ce170d3957707a388a4b02e2105b33a8e6599c9f850fb9dcdc6794a48c517bfb8","size":96606,"data":"","first_seen":"2026-08-30T02:34:42.400041Z","last_seen":"2026-08-30T02:34:42.400041Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/HTMLSanitizer-cciupgGC.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cac11eabec2b2c83d26ce54c6289166d","sha1":"2eaeab7478d9ef3371bfe81b702812fd72ac5be5","sha256":"072bfecac317b389de291b144c230c15ed44ab7b1cd56b16956981d09216d86e","sha512":"bb7b835a4195c4cc3c6570df57fd919e0f4211f71f6e84232be1442a6ce97be451d96ca81c33f8bf043475de4b4bb34fa04ba651542f4ff07a35ce88b39f0055","ssdeep":"","tlshash":"6fc08c2a9ca0abb3ec23889ec628fa84a90462e8702341bc05188996807ec505a30a55","size":166,"data":"","first_seen":"2026-05-20T05:52:32.849311Z","last_seen":"2026-08-30T02:34:42.370469Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q#/","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9b24348d83d59147aff8f6ef5742123e","sha1":"5375d105c6da2aeb80ec38641fb634d498365f4c","sha256":"e3fcdcd8e9b92017b28b57c37535c38efdd3bdd65a0d9c8d69f56d1f10bb9d90","sha512":"cf69977ada2a1fd053eed7141aa4c454d27f5d360c11a05fb4ee02fbb19e5f6da7f7c1c8df5bd84e2932984d8d73c8e0cb4e2bb89112286e95de421436b7c2dd","ssdeep":"","tlshash":"2ac080ccf1d63e205e127494747f39e49034541670585b53ccd4d9452e130f54233e9c","size":168,"data":"","first_seen":"2025-08-23T06:46:16.763354Z","last_seen":"2026-08-30T02:34:42.411223Z","times_seen":676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q#/","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"509c2abbf83565931a282543bede26db","sha1":"bf61bde2f37801f11a4d196901ed42b71e0ba56a","sha256":"9956d2c24ac49fb13a490b9d050ec69359fcc297e7d57822f327495f39659952","sha512":"c34b9102a2e72d29715d4a7efba174deef7f2530df23a13464a0cf9740c6fef29cbfbd3e29455899a722aa76cd9fdee6dd6dc9f51d81ae27224cd8756616f40f","ssdeep":"","tlshash":"6dc08cc9a0c22d002f42a81a10af3df890248026b0881b62edd4ec482e630f08237f98","size":152,"data":"","first_seen":"2024-12-04T14:07:03.086987Z","last_seen":"2026-08-30T02:34:42.413445Z","times_seen":1554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6aef912540ff1f056bd8ddade6e7bea4","sha1":"3d506ddea1700fb96aea9886a2b35476053dc1fd","sha256":"20482c90a37f75f3b7a67172f99751593b65a4bb566bdb9917d4d82aea174971","sha512":"f66d8134701e3103a856042a171e1ec6ecd4bd3c42d4468a618f8e632a15a3afbe11ff04293bb8e3260e87b2d671a61e274546e9e60753042788cd036849852d","ssdeep":"","tlshash":"d9212b1762a1643141fb38f91bdb5784372410836404d8573daedf4d0f2379269b3be8","size":1121,"data":"","first_seen":"2026-06-14T08:01:07.614618Z","last_seen":"2026-08-30T04:54:51.795103Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc67cd42e44d1e9f0a0a0f8ca7ac9da6","sha1":"8b46bf2e2262e9329d39c1c2b63085e225d67841","sha256":"180dfde18da5b77cb518a69d89ce6d6594f1e1acbdcffcbf3cfc0343fd5938fc","sha512":"9cf7f00ad0e55cb19ad8f14cb1e27cc6acffc8cf3877d3f9fb9d1546c78aee8a3a68b6bb05b7d4b6a35b3dd692690834488c9cfdebf9278d6e9090bc4e2c87a8","ssdeep":"","tlshash":"2cc08c0bb071114b0087f005938a08883124400b01390d28368c508a3fb2f8c034e6a8","size":180,"data":"","first_seen":"2026-05-26T00:10:57.605202Z","last_seen":"2026-08-30T04:54:51.796021Z","times_seen":308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"35b727150f72dcb5f53f0604a2622d7e","sha1":"154ea17bbb0c5b231262702a112392609fcf45b5","sha256":"9bf91e73c20f5f1288c6eccf0e2d8a1ae6a36cb3f31d3b9e5deb4f29bbad54e8","sha512":"061cf0afe7af6dcddb5b421ca4ddc7782dd567f78956a58c904348f0fa1256353939662508aa0b1bb17d3f06edcc08e46f5e3cf27952a61c516475bbe0ffaea4","ssdeep":"","tlshash":"1e51dbae527b37702d9392b61b6b2b05323150bb2420ca547eef87548f97d42a0537d3","size":2520,"data":"","first_seen":"2026-06-14T08:01:07.615969Z","last_seen":"2026-08-30T04:48:49.463978Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"daa567bbe33aefa8f90ab977e2fbf13f","sha1":"f6b2cb6dd86506e75f91a5db9567e13f05114206","sha256":"7b914ea295796d95a8285a2014028791ad1a1e6455b66f4a745135cd42e4d82f","sha512":"bb0aadabb69293681de9b07aa0a9aab5edfb78214d03e3ce39c1d2e5265671db5c909a6630ed5d3eb9afa63e0b945864dc612ce449ac915c3fa42625886c800b","ssdeep":"96:aiKu84QWJXDQWHPeWcRnSXBvu96adgMea7piLskym6y0:aiK1QDrPerhC0VhD7piQkym6y0","tlshash":"f691522916f1143466836178ab279b073b35a103b024cc647fde5794dfcaa35a9a33da","size":4623,"data":"","first_seen":"2026-08-30T02:34:42.416655Z","last_seen":"2026-08-30T02:34:42.416655Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47763bd7f2dd1f4382d08390fd57543e","sha1":"02f9384db4fd1fc4fef099f30effdcf8b02ea405","sha256":"1cf5fc2e8152dd9de806c0f5cc4c3c8c643af4e766904af5351130f4803851b9","sha512":"77b376186666c380bccf3334c2ffb50b204ae71534294d2dfc65b9d4d12d1f961df14c14e6359a67b6d2c5d8325d7c6335b24af0a4f7b09d89aa28c0531de57d","ssdeep":"","tlshash":"f9c08c188032a078000a210c8ab92292322041e70e163d24b39d544a0f0aa4f43b929c","size":175,"data":"","first_seen":"2026-05-25T21:59:04.609021Z","last_seen":"2026-08-30T06:25:07.422655Z","times_seen":1403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"32dc2fc746aa5518326b258edb3d24d7","sha1":"5f21510a34caf239331152dff893f7168dd7274d","sha256":"449dc9e2d88345ed0bffad51223b2b7c015867794dded1a3603eeb75e0765dc4","sha512":"bea30efae95f5bc56798cf7748bf3d70599fe62ad21ad48ac87db955070b39a5f44f0404604eb89c900157f86bbd3eb21e4d5e638702f2f4dca2c2b98b14f2d0","ssdeep":"","tlshash":"39f0dc0f28c9041257a31b7b43ef420cb3aa21834804c9307c8dd6287f619e64a12bec","size":476,"data":"","first_seen":"2026-08-30T02:34:42.419833Z","last_seen":"2026-08-30T02:34:42.419833Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-30T07:23:06.013402Z","times_seen":427795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"62894a35fc9c09d8b2f5446589aa2598","sha1":"121a49ae77faeaf6e2cf90063cf7848613de6804","sha256":"f2dbdc83e0c1901b5b6e9f2a8ec93e7615f0916744b056c511742dfe687f8a20","sha512":"be7c5af87d30036f6e8a3c1c51297be548f56cd09b24a75c5239480cf0515fc2dac96362f18c7306b51d409d9dc8887f658815830bd50de243639aab37aa47e6","ssdeep":"96:Tj/858XBb29iuREfxbunzcMIv0ZBcH/G/80jjp+bQzszG0+V25IRQe/QtiSNEu9G:T7XjFuXs1ffXLJkn","tlshash":"f0d1119e86741ebe09477d80898faf9b19ac3027f898fe61fd4ccb0423c97162674958","size":6755,"data":"","first_seen":"2026-08-30T02:34:42.422047Z","last_seen":"2026-08-30T02:34:42.422047Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78085,"data":"","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-08-30T04:54:51.764102Z","times_seen":3301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/form-validator.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5cae60d0a59205f9c82928fb16ca1a6","sha1":"c03a6517da694e1ba5aa6b9dc6a647bd119b819a","sha256":"60c23945490cba413f3d6cf2cc57d5c560faeb0cf68ab38daedc80939966b108","sha512":"c43f6e446c89df6fc82c5cecd3b5727bcc226c2826f9ec8e0ac88925ade0bffc212d92759b6c8117d31fa6b032feffe91cb2519318320a16bca2e07d9cd29043","ssdeep":"96:H1MWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:H1MW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c4c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","size":6063,"data":"","first_seen":"2023-03-08T00:47:54Z","last_seen":"2026-08-30T06:28:19.701327Z","times_seen":1087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/useBranding-CMvfvrTO.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"44daaf9387021ded4864e46f286ed441","sha1":"ad071f2647551984bfe66457709437a467bb87ea","sha256":"a2a3960bdc2bf8448509063af3d54ef1bb157453f8abd319b2a319c065ace7a4","sha512":"bdfc6253e281838ed330355b7f1e2d99e1e44fa4405a5eb3a541a9d486c0a42558b2378bca12b8a987b3231e5e34c03118fb00b855318f749140a4b157d7fbcd","ssdeep":"1536:pE+cVig0L2XmsHLISZY3BEBXlmJryrIGb/U2XIRGllf3JDECz5tfJswvjYlTpFYV:pFHL22sHLDZY3BWcJWzbB6Gllf5ECDJh","tlshash":"d79309d970d77023877666ea60bb000ab73d2a58744d9894f1ade5cb3e72c1d42b7f28","size":92152,"data":"","first_seen":"2026-08-30T02:34:42.391122Z","last_seen":"2026-08-30T02:34:42.391122Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/_plugin-vue_export-helper-BPljGQn5.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5912927593f2867274585f806f447f07","sha1":"80f0e94740e7b52dbfdd9cc0ccadaeabf7a94364","sha256":"b7e7fc7e08c1a540f715899547754b02419ba81bb60e5c1d059a2e74d3c057fa","sha512":"95d98ffa167197fa3c5b113f39709c8541b33c79b8265d5e32f86c866b7aae466e39732854ca0b5249be278c5b2e564a88c57da76f4669fe2c9d0857496817ce","ssdeep":"1536:885PUfBQPoO3D8j1ukSupWhEed8/5xnvWXE9uJdo6hMo/h32BbUgWFqLcke/W6:PQ6onNpCs5xviE9uvoCB/h3KFyqnA","tlshash":"d3f318e93081713293e919e250bb1402b2296829384d84e8b57deddf3e7654950fffbe","size":172758,"data":"","first_seen":"2026-08-30T02:34:42.33378Z","last_seen":"2026-08-30T02:34:42.33378Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q#/","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"4fe51158f451d5bc35ea0d69585542c1","sha1":"0be26f402b32ce2dee90b4cd9b388fe0e913c630","sha256":"071727e5afe6230f3da2b62e7d3524b7d62cd2279f0f5b5f0523be42d5b8d119","sha512":"6c58c52c36291825a3b3f5ec7d29803dbc7759bf0b8cf66fe63f91416520fab51bd7a5b5a68e3f10480d862f9316429f0a59e1307e73212c6b9e5899f5566b7a","ssdeep":"","tlshash":"e8c08cc8b0c62f202606a82818af38e89025802674481b028cd4dc8b2f234f48337ed8","size":158,"data":"","first_seen":"2024-10-25T14:46:12.028978Z","last_seen":"2026-08-30T02:34:42.424474Z","times_seen":1517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/jquery.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-08-30T06:28:19.846018Z","times_seen":11194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/magnific-popup.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-30T05:29:15.275592Z","times_seen":25399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/Validators-Dtl_R66K.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"115aadf2ae155b6f123b2070ff948628","sha1":"f8d5763e6c579077ff4226633e30df5d900a2826","sha256":"c4d0460175a422492941594a1f102aeb77395dc20df6395b13b82cc1b386d2e4","sha512":"5ec3cd97708691ee71c75fad7c0fe506354ce58f918d278b7f7c38c877c3f4016c57a88ccb497871ace4508af95fdd4bddc7462ad0b9df0d66fb89bb939c2528","ssdeep":"1536:ifp+tO5BXfsBBpHw1e65/jemB09fKTaKNWfu:iBxX0BBpQHyrfONKu","tlshash":"4a63e6d872d2b03253ea06a6507a010af7395d90344ed1d4f52d9cef3db684a92b7e3e","size":70870,"data":"","first_seen":"2026-08-30T02:34:42.404389Z","last_seen":"2026-08-30T02:34:42.404389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efc01f2aded8e7b272ab9f9e1b3ecdb0","sha1":"eef21a57c46361f05c28d0d7b97fdc6530185c17","sha256":"668bfb67cff6b815ff9f9b82e070d4ad8721414bca6f3de21f10fb9f3e5dfa32","sha512":"20e04e83be2dbab7ec9972ac31ba5372fa53d62d046220f93e348c47f1840b636d54d8ca380eb36e7f7445123eec24e1d435fb61928eea259ccf912c5c3e8b08","ssdeep":"768:FCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSRc7UuHjRUQuFBt33:MITMFC4dbMVRSRcgRDV","tlshash":"cf137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7d88c213ffbc","size":44350,"data":"","first_seen":"2023-03-08T07:37:20Z","last_seen":"2026-08-30T04:54:51.732838Z","times_seen":1025,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/parallax.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a9a9442f70e0807475a21b835dce50b","sha1":"7b4755ab79dcfbe1aecb13823f78997061fd1b8f","sha256":"fde3fba1a1c3dbae530a58d3a542369cef2e0000685cb299a265e721056d4201","sha512":"20a1dd28d273d407d096be59beb4a92c260791d1cf16019cde84651f22fd69f9a62950dae7addb5f807452a32afaa02b406d72f5d79d43d8caa9716960919cb2","ssdeep":"192:t0PtdiPwbyxVZ8343NiOAZSUa89Fr15FZxY8wb84FxDco+W4+D:t0uPwGLsgNiOAZSIp15FZ68wbZWWl","tlshash":"3d52a8453ae6111502ff73ad609f57087528a232c52ace1f7c3dc2d8a580b8953bb779","size":13302,"data":"","first_seen":"2024-08-29T17:20:29.824917Z","last_seen":"2026-08-30T04:54:51.73492Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68ee10aa7ede43f8bb3293b220daf775","sha1":"1f26a636577ea9aaa524c0a23ae8cf342be925e9","sha256":"76e28fc0425d80422e45305464ada45c7c9b4a00132c65012c737c22814c259f","sha512":"531d2baf5f4d61c0def2c5f45fd8d9b69b143c24d0474a01291d858b086b45c233d1cca885cc722d6e6eaff3f8cb62e637df797beca8f5aec20d090f0e23fe08","ssdeep":"384:UzCKMPZATN09o0mtvwfEXMb5TZ/dDszCnfYI:UVMhAh060svwcX0T1dhh","tlshash":"10a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","size":23138,"data":"","first_seen":"2026-05-06T20:53:53.345523Z","last_seen":"2026-08-30T06:25:07.351712Z","times_seen":2653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/vue-dompurify-html-fUtYD0FJ.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7538b6213c226329c79acfe8b06eca1","sha1":"1acb685547f558634b5c6ce526dc72769a8d564f","sha256":"425433229c372a030d955c23561e08c76efc62fcaf9d10a52b99facec3aca253","sha512":"0120913c2249debd41f63ad386d372dbf3a8b891248c07923be0ae32aef9014507a43ad4d2d325c40ba6f6e95c4bca75213cd806d0c6b65f329b9b8f14200b1a","ssdeep":"3072:eOc0x7NKoAwgF9/zAn8+9oOzDJfMpuZJi:eOcyKInvocFfMpuHi","tlshash":"b7d36bb434d26c7543e239da587b2509e5790919340cc8a5fa8cdceb2cb666670ebf3c","size":136647,"data":"","first_seen":"2026-08-30T02:34:42.278879Z","last_seen":"2026-08-30T02:34:42.278879Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/module-DV9-IjSK.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"33502ba0d1968c5627187df98be23016","sha1":"a87fdb03950c4c3011035106be3dad873124260d","sha256":"0eae16d78b1ef8a3c502b7497f84c6839e4b1b161aac714a19ce64f8134e168f","sha512":"32b7151a2e72824f8f5106a46dd1b1350079633462991e1804be437b07e9c93aaf5e67ef91145906065636279eace4b1e34ee4cca1e2bc9b8990253e8e432937","ssdeep":"192:6oAWbIuugGZvOlsKY/aGkoVj24tNs1FsyXJzob1jfgIjoqtP:6o5IXBWYvkotskyXJzoZzgCoqtP","tlshash":"471274f51a6c66ed35474f69db73e524db2f68b239bca0f05a2fe5b490935c0c213850","size":9613,"data":"","first_seen":"2026-08-30T02:34:42.298431Z","last_seen":"2026-08-30T02:34:42.298431Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/index-BGfh9Qyb.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9f1d1295aacf5c22c7cab14f7238d4","sha1":"6f427d94d1f214acb5d01a315c45a965efe3a20c","sha256":"187d196fdcefb8275cc45553f775ac2d14129f79c66ca0ef95702750365e4ce8","sha512":"1762ad5ee47411c8ef14e89f30aad507c065722400e0955b8f2424f534c1e8493b2899516e7a0b857f5a2998b321de211518093c1bd163a8a9649ecea2905505","ssdeep":"6144:52uIe7zlIqLWIIFKtev3y9CbB1qU8vwaasdr:RIeHnLWVFKtq1qUDb2","tlshash":"7f747cdc62d230a0476200d6705b2407f27e9c36626dc5e1e46e9d6938b8cd98afbf7d","size":339834,"data":"","first_seen":"2026-08-30T02:34:42.281431Z","last_seen":"2026-08-30T02:34:42.281431Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/meanmenu.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f92bd7e01c33f6a2bd73c5a2833b4874","sha1":"39533bc5c1e8128008023565e03830e00ce17808","sha256":"0927e12f94a642d9bbf07b4204102848162eeecadc02d002ace6fe334315b832","sha512":"e8a7d2768621e01fdf3e45eb187437f7c452f6fafd1d0a48add3844c7d16858ebadaa17f7b7272625f99b8a3f1f4426fab861d62cf1c0656bcca6617a12b344b","ssdeep":"96:cqHVT5bG+ESTXybNrNnaToz99MClbxXvY+CSoGZn7c6BFSEXT:zVT519XyJnl1BCSlZnl9XT","tlshash":"bfc1dd2bb5b044f8a0bb7a61b97af230f4f3660bf146d50131bd64262f31d6015a2fe9","size":6035,"data":"","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.770277Z","times_seen":619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/slick.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cca96dece8c053d46dfa20101388d2d3","sha1":"2c14e299764bcea9dc875e1f2e1a86afc7bc3fcf","sha256":"db5a2153f69965283f3d434959ffbee8dc61514e524fb871c6faac56a1b6f742","sha512":"a2ef71e1187f1aced8be072976d59cd360a4015fabdb3a2bc55d56df4fa06eff59e24aff355dcbf1cea7efe8c49cd3cf760152c40283803f6f08e97c88307815","ssdeep":"768:MjL0ySLGPzYbHpJIkdSAeFr8qGAOxCt/QXlGLAcB68Kmb:UrPzYbVxCt/fB6ri","tlshash":"4033b409a210172658e725f5305bc54c73ffe6ba9a01c1d878e683ca24dd1059fdfbea","size":50674,"data":"","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.787594Z","times_seen":719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/contact-form-script.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dc6989850222aee1a68cc132426f035","sha1":"f6a762662c4df511e97df3f0dd730b64aa31cd9d","sha256":"bbe7b53d11fee22a044cff9a34d37fe623ad369becd7a442e3b4f268e5d603d3","sha512":"2d2152378e98221bdf87e05c0d5fb7a97a69a335f565e5ea260dbf893d3bdb4237740a3577b6b3061759c9870b96dd0c875303c8bdb39547b6ac4f7dadc33fd7","ssdeep":"","tlshash":"5741bd08651927c40a333b7de69a9104df611363c505eb553caca9d46fb8f9831a1fbd","size":2144,"data":"","first_seen":"2023-03-10T17:30:02Z","last_seen":"2026-08-30T04:54:51.758151Z","times_seen":351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/sharedFrameEvents-Cz3L815q.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a8fbdea1006d3d61326962657a95691","sha1":"8602a805af1e4fc30400f17cf7cb12c041a0aa04","sha256":"7a326974c78e334b8e696ec7f4a20334e91143e9825b069d9ef86724eb6b0ba1","sha512":"02cae5276bf980a40ad9aff0adfc9dc435538ef975f785a66bb589531d1288735b22ac0db5662ed2c152235013235f7f6f283b88091f9f36ca9ad18ebf862031","ssdeep":"","tlshash":"ff11e18cdc7790b741e308cb13a05b256228155272bf4cf078799c3d1719e9f02cee08","size":944,"data":"","first_seen":"2026-06-03T12:29:30.762728Z","last_seen":"2026-08-30T02:34:42.362809Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/Branding-Bv5d2FoZ.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1243de9e1f75bd7ba6681142bc4dd6c6","sha1":"b67755bbda74e6f4658df02928f67a2f3e8dd2b1","sha256":"dee5bd427836c1d92b04a899ab7588a3614a1989160d8aac65ed01cac2efc079","sha512":"ab0e4cf88237485d32626858d56c3640fe581f8e84d5c02beac1ad69596193e0a8f9f39d527281af22c10c56f6b42082f9f92030260d8f82ef98b58364547977","ssdeep":"","tlshash":"b831ba5d6af657ba86d2012fe0e1a800f44f1eccf22d9cccd09d50172e3e95164687c5","size":1552,"data":"","first_seen":"2026-08-30T02:34:42.300823Z","last_seen":"2026-08-30T02:34:42.300823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/Home-BIgP2XQq.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b019379eda1c26c830f4f4a62deb1e7","sha1":"2ac1633caa4e4217b58f733addd9b83a5168a961","sha256":"6a61ba52476b31583fd4844a2b0f68c1be9e44392d230674c85090f6e2190f23","sha512":"b1e89cb9d2353c45f61a35ff444202f572bda23eb091d53c748ea34cc8912e8d1b269c41d35ce65b32a7742f8944f04d095b9a2c27ddc399a1562bad3c55f678","ssdeep":"96:KN005iNWRLCglkYhsHPowbT7lWTRLKzulT9Bcew+jyxXnpFYdK0c2TrWiTaj:KK05HRrlRsAwbTMTRBjJwkU5U5/W4E","tlshash":"5bc1fad9f4604dbed5a748a5b144244203390f9fdea280f5f8fe642e2748cb8d66b39d","size":5765,"data":"","first_seen":"2026-08-30T02:34:42.340549Z","last_seen":"2026-08-30T02:34:42.340549Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/nice-select.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab62d8a15524602c06b356ae74eea55c","sha1":"ae602ab104a3f8008fbcfd7967cb302dd0681e20","sha256":"cd204d095086d67e207e13bae8ceb3de8759eb9eedcd4080809c929dc7af1065","sha512":"d4798aa79f38cf35ae416780c5d8daf9333ec29440c55d6d9c164aef67cbea21984ee309b756c09628bcf69c52ed29fe5b56ac44b31cccbb78b223ae06c43f95","ssdeep":"","tlshash":"60511114b10512f648ff24d37911b147a075493dc42ac14aa97e86b21dfec02aab6d5f","size":2937,"data":"","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.780871Z","times_seen":610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/constants-lVAyZKq6.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c23eb02c59275cf91b59cfd6bbcc315a","sha1":"6d75b11d40836ca533dd3c2230ebd9cc7e927c9c","sha256":"af3915fac7511beefcbb8960c26748c2ddf6a7e0f588e71261cf175455b3fb97","sha512":"94b2ab23459feb51256816f600cb4129bebf70026b8774057e059187650f92bcde7815f5d71b0be51ed10ee3bfc4663d8a9bd8c8485a7c5b3e6acb8b031bb6d5","ssdeep":"","tlshash":"f0c02b0b6db45e7556301b3fc3a2500b2e0ca08df1afdda8fc08d0e186a25c36638d24","size":157,"data":"","first_seen":"2024-10-25T14:46:11.754013Z","last_seen":"2026-08-30T02:34:42.403652Z","times_seen":2054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"973e831379b94d060af9b2e9bc78f49e","sha1":"83448e2204ac7f3afafeb07ffa3d2b92a7e31ce2","sha256":"814148cbc3bea44c7786594a53ca13a6326ad08dfd73abbb11e82c285a15109b","sha512":"45e6d9b25a24e2c9a1c34173df38587cad6d7d85753f8211d4e0dff58e73be9e4cb99724024ead994c6cef70aaa958f9f15fb628bc9d83a52b39ca44844f8080","ssdeep":"","tlshash":"5c90027528c2201060173256547658e601308030d4588d51010498a1985543156065ac","size":49,"data":"","first_seen":"2023-04-11T21:45:58Z","last_seen":"2026-08-30T06:26:59.038701Z","times_seen":38725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q#/","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"500f837d11f712465f14a48ff618dd89","sha1":"a91d88cddba7803f478a5affa1fe7b3d02ec16d3","sha256":"775aaf7edd5c8f81028974eac938b32dbc8dd32e86ed5482987305ec7eb4883d","sha512":"d898fe7a5927c58750e793dac84e9bf822ad3549e99dacfa8df203f37fe3090ec85dca257ab37ff27eaeb8f9a058b1dd08acb7d5ad652a5e92e5be2acd3131a6","ssdeep":"","tlshash":"63c08cc5a0ca6e001a02655610af28e8a024402a78885b528c94d8582e220b09233e98","size":145,"data":"","first_seen":"2024-10-25T14:46:12.102638Z","last_seen":"2026-08-30T02:34:42.427435Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/odometer.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","size":10264,"data":"","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-08-30T06:28:56.79227Z","times_seen":3538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/main.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47bc986391ae43304be7544164cf022d","sha1":"e42afdb45a95bee3a021a79a24bb0357f84b62b8","sha256":"f7f7c12c779f4100a67c0a9c853a1f4a534183c36746df58d358bb5d02e548f8","sha512":"95d746af3aa95c33c01f8ad9e80ba17b7390bae9c4df4c0d2d85762bb84ac18604bfe07eab20d2106486a7a1b26e83c621d84b1d3b7fa0a064ce6d94be6f483b","ssdeep":"96:705I1XuiMlvMsW638DBpUtr+LIZDu7dQzqvcr8r:705I1Xx0tuIZDTA","tlshash":"15c17344714c143dc5fb32a4d139d5098f7d6111e203b2f5f8fe00ac1b686aeb6ba99e","size":5916,"data":"","first_seen":"2024-08-29T17:20:29.828451Z","last_seen":"2026-08-30T04:54:51.771254Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/packs/js/sdk.js","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d1578c5f21f2e4c49a4f65f199d6b7e","sha1":"4eb51acd82fa9ca038c5df8523febd2e11f0d5ca","sha256":"5b1eb8190acffdb5761e4210947478b1b2a6600507e3a117a657cc97d9b592aa","sha512":"aabbdb549a2a2c8a710c43e31447827ac273b23622159669146023bbac217b6a35de4c624f9abb946aa51761dfa61b157f4ae10d1ab71fc92748d0e933765b32","ssdeep":"384:/aiKgJOiV60t0P050/0+J3qBfQWv5v1490H9mTR4ltMkBYmY060Rf/f8hH5dgkS1:/bBLV60t0P050/0i3qBfQWv5v1490H93","tlshash":"e1a2d7e291453e3547a64a877791bb68333841e8f1438de0e589ad7d32c99c72833ef9","size":21995,"data":"","first_seen":"2026-08-27T07:23:15.44484Z","last_seen":"2026-08-30T02:34:42.271811Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/Icon-CSIDAZny.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"395db3fabb84e060beb9799c1022e59a","sha1":"ee660b069b33ba2f021ae7d2aa25a5086bc0eb19","sha256":"ecbab327211776ac5ad0f460f2f78faa0f8b084c2a43df56a404f6658d1c42f8","sha512":"8187c3bbfbcf1e8aed315e77e0809680bbc8b5e0ccc22a5127e092aa57ffa6220ecf2ccd87dceab9826c7f714784e2ed744acfa0e2ad28171eb13130b03c6a2c","ssdeep":"96:ItXkA6rrv+QsrRelEQfiWyQVCANUIIBbVLclT6M97AMN/T635SR93UE47TTPxx9i:sAv+QiRiEQKWJNUZw7/T63S3U36C72","tlshash":"e0c10b18c0e26dde8d36f774ec8207b068d81d54a54d48abf3b5b92453af824693af34","size":5940,"data":"","first_seen":"2026-08-30T02:34:42.36679Z","last_seen":"2026-08-30T02:34:42.36679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/index-DJvsux1d.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d35a4cb35259802dbcfd721c8812f2f","sha1":"513ddf925db5ad16d0a767dfcb22c9a7053aa4b5","sha256":"7fb890335371c58c97dcc03004e96b370020f2e9ac5e05e20c9eaf4f5537ab38","sha512":"bbbf873e886df91633c9f3186ad271df0a34de8600d76f980f8e1cdb95b699f9a46090fa0439c976027835e7d21a89628a75ea6917dd45635be96ddceb5fdda1","ssdeep":"384:BdgMUXwkGVsxelSRLcG6dQ3e0Q3MFQSKPLT8CADcAQz0SJ/unUtAprKr:sXwkGVsxelSRLcqfQ3CQSVcX0SkUtAp6","tlshash":"27a265c075c7b22a57639a69400e0509f11e6a71fc8fad11f496e7c2f8a7912923ffd8","size":21776,"data":"","first_seen":"2026-08-27T07:23:15.410938Z","last_seen":"2026-08-30T02:34:42.317282Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"[PWA] Service Worker registration failed:ServiceWorker script at https://orivstrongholds.com/sw.js for scope https://orivstrongholds.com/ encountered an error during installation.","filename":"https://orivstrongholds.com/","line_number":1512,"column_number":29}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:59.757Z","timestamp":1788057239757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://orivstrongholds.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 05:14:37 GMT\r\nexpires: Fri, 27 Aug 2027 05:14:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249562\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-30T06:25:18.682343Z","times_seen":34915,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":18,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/useBranding-DSFJg_40.css","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.929Z","timestamp":1788057241929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/useBranding-DSFJg_40.css HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Sat, 15 Aug 2026 05:24:51 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 13 Aug 2026 14:24:54 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 1285750\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: RghzH3hmGdpG-7O_kM_w6__6Xrn2igTYy2z85CCbDXuCWdFsGxhGBQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1422,"size_decoded":1015,"mime_type":"text/css","magic":"ASCII text, with very long lines (1421)","md5":"cd8477fb5c8dcd18340c940f61a62595","sha1":"3c0390372088e981ac3dfdfb1855e60de2f14387","sha256":"8a428133338294b7fe41c8f691a0ded3e66e1fe62f834902ab9b9d68257e7078","sha512":"7581c9758e0af0df9a211d02c404e8c6f99d13615db9b1c9f41bb301f008c5d49dadfb53bf8ce5f69769ec5fe2e9c8e66a029f98c1e569360259a46c9880e806","ssdeep":"","tlshash":"5321c23c7a0904787833e2e3d3a89acc566776c2be538b4de753692059d378838b652c","first_seen":"2026-03-11T15:09:52.415093Z","last_seen":"2026-08-30T02:34:42.259186Z","times_seen":628,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/flaticon.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.695Z","timestamp":1788057238695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/flaticon.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vb%2BGCnIk10R0PLIIHLko37MzNu18RiHS%2B2bA130m70EoQHhZ13WgdUuFomVr6hhiBgEu4p%2FfoFCnMYKgbm2e%2B0nMSRLyriPiq9A7NhXCtH5U3w5uP6NHgN6f49a2VuBH%2BSW6N33M\"}]}\r\ncf-ray: a33064cdd983b51e-OSL\r\ncontent-length: 439\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1569,"size_decoded":1236,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b685b2dfd3cfb19626146177d1c95e5","sha1":"f195ad890dd1d507d2fab849448e9b737f9d6bbf","sha256":"909efd0a62bbc415e927346844061afdedd751683b6eba7142b1db3bb72ea18c","sha512":"621b491a8b01a066a23630a90ebb71fbaa89c6d10dc9581064a548f82f2c467c5b4a47237a829d4ac375ae049c47f571b96d494124d5fe314f7c565b39189ade","ssdeep":"","tlshash":"4e31e6e9c12e10818712af45e7abb6d0af48b02c99c09d1ae1751d9dfef1e35878279c","first_seen":"2025-04-09T11:54:58.551863Z","last_seen":"2026-08-30T04:54:51.763165Z","times_seen":328,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Crimson+Text:wght@400;600;700\u0026family=DM+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.918Z","timestamp":1788057238918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Crimson+Text:wght@400;600;700\u0026family=DM+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Aug 2026 02:33:59 GMT\r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7406,"size_decoded":1343,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d34c4709c845524ede56493d18bcbd6a","sha1":"9dc8b77976303bb765dd43925d29969e3b78548a","sha256":"462943911a79d4366ed009b4c2a87bdfd0d12a1d2c836cc5227192f8b5d71d86","sha512":"e3e0a30a216744a6a359dcdce1915cc4260c00f68f6ce2821285cd575db394a3a353c48732f66527071ac0bea7e8eb820440faea02f3f9e98e3feb642352f36f","ssdeep":"192:cG8Kt8Khj8K+88x8IF8sD8r8zm8ZwD+rw8+Owl+NwG+3:cfKuK+K+5y9s4grNis+3","tlshash":"41e1dd90047ba510eb971dc526cebe33ee4e61547454d878affe1888fcaec291362b4d","first_seen":"2025-10-26T02:17:19.355688Z","last_seen":"2026-08-30T04:54:51.755562Z","times_seen":163,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":83,"connect":16,"send":0,"wait":35,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/nice-select.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.933Z","timestamp":1788057238933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/nice-select.min.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1FjVfB9CHgyXa%2BkNxRFgd2YL32%2F4YXcmVolYvmXWDj3Q6nY3EGYfj1GU2%2FEYDxLPQFeWqeLeXbBu3hFmHNc%2F6j2kiaMGD18f8WgPDLi57YB07r5LWuVO%2FNrQEx1s0hOuYNBolC1k\"}]}\r\ncf-ray: a33064cf5994b51e-OSL\r\ncontent-length: 931\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2937,"size_decoded":1686,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822), with CRLF line terminators","md5":"ab62d8a15524602c06b356ae74eea55c","sha1":"ae602ab104a3f8008fbcfd7967cb302dd0681e20","sha256":"cd204d095086d67e207e13bae8ceb3de8759eb9eedcd4080809c929dc7af1065","sha512":"d4798aa79f38cf35ae416780c5d8daf9333ec29440c55d6d9c164aef67cbea21984ee309b756c09628bcf69c52ed29fe5b56ac44b31cccbb78b223ae06c43f95","ssdeep":"","tlshash":"60511114b10512f648ff24d37911b147a075493dc42ac14aa97e86b21dfec02aab6d5f","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.780871Z","times_seen":610,"resource_available":true,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/main-mobile.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.974Z","timestamp":1788057238974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/main-mobile.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQVcBcjw5hMpIqngLxMuQPIoHW1HSlxIjE21JtFW%2BJICWhi1J8NOddAJfTy%2FMF48PThF21EWHkWB1SSl7WZaWk3ZK6ZhPMKNQ%2BH5rHiSnJMswnyGVNxIkfOTo2%2FoBNeyJVD%2Bixya\"}]}\r\ncf-ray: a33064cf99acb51e-OSL\r\ncontent-length: 55689\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55689,"size_decoded":56441,"mime_type":"image/png","magic":"PNG image data, 549 x 541, 8-bit colormap, non-interlaced","md5":"c59a7bff6b59e7c447efa275cee75f4c","sha1":"677b86ed85ef05bfe71d23ad2ad9f8b7cdb2e761","sha256":"b3fa0e45d454ad8b4f6efec14c2861d78948bc0319754e53148362f7ee5b66a2","sha512":"30c157ac5eeba634395ac39d29934196ffdf795614aefaa1b82d80008303a558da569ad6e010ac736c7187ea054cb5dee379ec515a76665cf578143396f27bd8","ssdeep":"1536:RtdyITWfgPk+OXmOz0Ya6PqM3i43qEfoQCadXz08nAC0F:RbWYPJqmo0j6Pxh6Efeahr8","tlshash":"ab4302a8c9f53da4e3188505001fde329759229bf1df7b10e1d9631a982e2aabc4f5c3","first_seen":"2024-08-29T11:46:34Z","last_seen":"2026-08-30T04:54:51.753325Z","times_seen":352,"resource_available":false,"data":null}},"time_used":1233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":890,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:59.761Z","timestamp":1788057239761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://orivstrongholds.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 05:14:37 GMT\r\nexpires: Fri, 27 Aug 2027 05:14:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249562\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-30T06:25:18.682343Z","times_seen":34915,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":21,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:59.770Z","timestamp":1788057239770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 30 Aug 2026 02:34:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pezRBJ%2FrSNJjh3QDTaC5yY%2FJvQ%2Bm2PE9rHyY9usiwA9euqqP5C3IZkJiTLEjgc91RfYlyXOs9A51JTrdFhCRhmaL1ylZBpmdAY47etcQHwh5SEnTLFLBnNYhwZTVrX022QV1L%2F1F\"}]}\r\ncache-control: no-cache, private\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33064d489cfb51e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":4003,"size_decoded":2489,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"aed06967e631c1cd12e84295e9224928","sha1":"015f9206af280fb11e7a96c907df03dd5f928907","sha256":"91f5b84f392e6d07e449af67427651d311c42401c9370f14a879545d13f72cfc","sha512":"e458bce571540a49664e6fbb0ebf76a024c73be5b92044e8b5ef1685e39c13363bad6ad2c66b8160bd6b9965ba5a553ea3e4024800b12e70d65abc33967dc2f8","ssdeep":"","tlshash":"7d81a7e16f5e99bb031206ab6014737afcaf1c39f526dddbf5b70013a7c44854a712a0","first_seen":"2026-08-30T02:34:42.265154Z","last_seen":"2026-08-30T02:34:42.265154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/crimsontext/v19/wlppgwHKFkZgtmSR3NB0oRJXsCxGDNNQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:34:00.433Z","timestamp":1788057240433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/crimsontext/v19/wlppgwHKFkZgtmSR3NB0oRJXsCxGDNNQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://orivstrongholds.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26012\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 29 Aug 2026 01:02:11 GMT\r\nexpires: Sun, 29 Aug 2027 01:02:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 91909\r\nlast-modified: Tue, 24 May 2022 18:30:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26012,"size_decoded":26824,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26012, version 1.0","md5":"d7a5ae87e50b75fb48940e32792aa13b","sha1":"a09c276f3bc0261ef1c701820e663e3bdc0cc481","sha256":"e2ca4f57a77f4db70d61c4d16e748545ce2000e0252be1f67fa1c964040f9b9b","sha512":"a3a98d99186bd1df8aae3cc8de26835d6ff59e9d64c562ad8d4d74f2669a9bf059a286c30d1b593be986fd79b8b1e200e25bf4bc22ca28f471b20cb73a96ae6a","ssdeep":"384:qkpgd+DendA7JeJ5+FrHTtBrqWKcdPpZFixN8JObcaA348WBlXLzMlUaTnsM6SKx:qkOQiKJeCrgUP3ANdKOwlUUsiihp4i9l","tlshash":"52c2e1285467229b84e746b56646f2bc334ad4494c805fff85361332d1f6fb67349d1c","first_seen":"2023-05-02T18:44:39Z","last_seen":"2026-08-30T04:54:51.773136Z","times_seen":1542,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.929Z","timestamp":1788057238929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rsypjr4CyWoH9e0oI9U8VH2x0AI1miQ02niSvbzbcdpwwGrav3nuOuvJvZ2%2FL%2F0kEjTsCzfwaD2%2BS4jpfxVfgKnkdx07gY7dXFsFgkst0CHincXUYy79kSioQdlDls8YTiBGGUPC\"}]}\r\ncf-ray: a33064cf4992b51e-OSL\r\ncontent-length: 22162\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":78085,"size_decoded":22915,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-08-30T04:54:51.764102Z","times_seen":3301,"resource_available":true,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/slick.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.935Z","timestamp":1788057238935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/slick.min.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GZv6JoJ3%2B%2BfE4cJnVG1%2BXf4%2FbLnqh%2B2eAK%2FtFCKSgkiXD6OQvG61MkDaJcWJql7SQJyYWkhsjmZDeKY37j7dbH68Iqz0juHmpNrFjRRo93m5ZG8ODH6%2BoZkg4Cuxk5CgA%2BJWaxIN\"}]}\r\ncf-ray: a33064cf5995b51e-OSL\r\ncontent-length: 10883\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50674,"size_decoded":11646,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2614), with CRLF line terminators","md5":"cca96dece8c053d46dfa20101388d2d3","sha1":"2c14e299764bcea9dc875e1f2e1a86afc7bc3fcf","sha256":"db5a2153f69965283f3d434959ffbee8dc61514e524fb871c6faac56a1b6f742","sha512":"a2ef71e1187f1aced8be072976d59cd360a4015fabdb3a2bc55d56df4fa06eff59e24aff355dcbf1cea7efe8c49cd3cf760152c40283803f6f08e97c88307815","ssdeep":"768:MjL0ySLGPzYbHpJIkdSAeFr8qGAOxCt/QXlGLAcB68Kmb:UrPzYbVxCt/fB6ri","tlshash":"4033b409a210172658e725f5305bc54c73ffe6ba9a01c1d878e683ca24dd1059fdfbea","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.787594Z","times_seen":719,"resource_available":true,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":892,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.949Z","timestamp":1788057238949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:29:44 GMT","end":"Sat, 21 Nov 2026 04:29:42 GMT"},"fingerprint":{"sha1":"AD:56:9A:7A:0D:59:51:B4:A7:48:82:60:B8:DB:1F:A1:A1:FD:51:F3","sha256":"BD:3C:C8:79:0A:A4:32:CB:65:88:4E:EB:BC:86:AF:40:EE:41:55:58:77:2D:F1:14:A0:79:98:26:E5:1B:17:AF"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Aug 2026 22:34:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 26 Aug 2027 15:24:19 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vcSZ3EWuWvoZxoMfyGF%2FWjOQVVOBwfwTCpJ9ooUXsUVZT3QKyRukOWEKqq99G9VaHOJh4ldny8VWsPDMr26rcWS0xi7%2B3nqUkQgvEeNwFD50rF1KTADwoINhfKfs5Bv6TJMeLg%3D%3D\"}]}\r\nage: 299379\r\ncf-cache-status: HIT\r\netag: W/\"6a8780ea-5a62\"\r\ncontent-encoding: br\r\ncf-ray: a33064cffe8c56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23138,"size_decoded":7502,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"68ee10aa7ede43f8bb3293b220daf775","sha1":"1f26a636577ea9aaa524c0a23ae8cf342be925e9","sha256":"76e28fc0425d80422e45305464ada45c7c9b4a00132c65012c737c22814c259f","sha512":"531d2baf5f4d61c0def2c5f45fd8d9b69b143c24d0474a01291d858b086b45c233d1cca885cc722d6e6eaff3f8cb62e637df797beca8f5aec20d090f0e23fe08","ssdeep":"384:UzCKMPZATN09o0mtvwfEXMb5TZ/dDszCnfYI:UVMhAh060svwcX0T1dhh","tlshash":"10a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2026-05-06T20:53:53.345523Z","last_seen":"2026-08-30T06:25:07.351712Z","times_seen":2653,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":52,"connect":1,"send":0,"wait":30,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/packs/js/sdk.js","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:34:00.445Z","timestamp":1788057240445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.chatwoot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C6:C8:CC:4F:B9:19:54:D2:08:19:4E:7B:F0:17:6D:EE:13:74:FA:40","sha256":"F4:7C:47:E4:AD:14:81:EC:91:65:5F:6D:FE:68:B2:7D:78:E9:19:CB:8C:74:D7:83:88:4E:D0:DA:06:66:8E:98"}}},"request":{"raw":"GET /packs/js/sdk.js HTTP/1.1\r\nHost: app.chatwoot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:34:01 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6203\r\nlast-modified: Fri, 28 Aug 2026 18:50:37 GMT\r\ncache-control: public, max-age=31556952\r\nvary: accept-encoding, Origin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21995,"size_decoded":6468,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21994)","md5":"9d1578c5f21f2e4c49a4f65f199d6b7e","sha1":"4eb51acd82fa9ca038c5df8523febd2e11f0d5ca","sha256":"5b1eb8190acffdb5761e4210947478b1b2a6600507e3a117a657cc97d9b592aa","sha512":"aabbdb549a2a2c8a710c43e31447827ac273b23622159669146023bbac217b6a35de4c624f9abb946aa51761dfa61b157f4ae10d1ab71fc92748d0e933765b32","ssdeep":"384:/aiKgJOiV60t0P050/0+J3qBfQWv5v1490H9mTR4ltMkBYmY060Rf/f8hH5dgkS1:/bBLV60t0P050/0i3qBfQWv5v1490H93","tlshash":"e1a2d7e291453e3547a64a877791bb68333841e8f1438de0e589ad7d32c99c72833ef9","first_seen":"2026-08-27T07:23:15.44484Z","last_seen":"2026-08-30T02:34:42.271811Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1120,"timings":{"blocked":0,"dns":43,"connect":96,"send":0,"wait":289,"receive":0,"ssl":691},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBCUGZKRndZPSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b066f2c6d6433dd25514e84ab49648da5edb1c50/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9MWm05eWJXRjBTU0lJY0c1bkJqb0dSVlE2RTNKbGMybDZaVjkwYjE5bWFXeHNXd2RwQWZvdyIsImV4cCI6bnVsbCwicHVyIjoidmFyaWF0aW9uIn19--624b3ceb3fdf42c4b07c7818563fe60603b6095b/FES%20(13).png","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:02.341Z","timestamp":1788057242341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.chatwoot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C6:C8:CC:4F:B9:19:54:D2:08:19:4E:7B:F0:17:6D:EE:13:74:FA:40","sha256":"F4:7C:47:E4:AD:14:81:EC:91:65:5F:6D:FE:68:B2:7D:78:E9:19:CB:8C:74:D7:83:88:4E:D0:DA:06:66:8E:98"}}},"request":{"raw":"GET /rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBCUGZKRndZPSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b066f2c6d6433dd25514e84ab49648da5edb1c50/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9MWm05eWJXRjBTU0lJY0c1bkJqb0dSVlE2RTNKbGMybDZaVjkwYjE5bWFXeHNXd2RwQWZvdyIsImV4cCI6bnVsbCwicHVyIjoidmFyaWF0aW9uIn19--624b3ceb3fdf42c4b07c7818563fe60603b6095b/FES%20(13).png HTTP/1.1\r\nHost: app.chatwoot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 30 Aug 2026 02:34:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://prod-chatwoot-assets.s3.amazonaws.com/vp24rx05cqr6ot0wsn72mz7ixjqc?response-content-disposition=inline%3B%20filename%3D%22FES%20%252813%2529.png%22%3B%20filename%2A%3DUTF-8%27%27FES%2520%252813%2529.png\u0026response-content-type=image%2Fpng\u0026X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=AKIAX7PDOLKIACEXACHP%2F20260830%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20260830T023402Z\u0026X-Amz-Expires=300\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=6e9d977358475031762bf7f4df11b08e6dcca7ed92af3a16804eb1ea6a2a680a\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=300, private\r\nx-request-id: a09653ff-242e-40f7-ba35-1deecfc2eaac\r\nx-runtime: 0.011694\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/responsive.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.710Z","timestamp":1788057238710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/responsive.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=odO0jZ5sWhLu0p6GZVXbZ60GtGABFs6XyYAtJZBUzyk9kSx%2BAE%2Brx2WAf4Fqu091exGWH3BHH41JKjbrdVstQtuR2rGjcRBexwjICYChAZw4qbb8fZUgStf9OniwjB64IPwmhZTz\"}]}\r\ncf-ray: a33064cde98cb51e-OSL\r\ncontent-length: 4725\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":42016,"size_decoded":5517,"mime_type":"text/css","magic":"ASCII text","md5":"0c84a81a7dee675b6713af510b5725d8","sha1":"2ebb9bb229c01f940e0506c8d260947d9c48a996","sha256":"7b7658d6d943c42439e53284af5caef22a924806eba3501e6c0b11b88aa8a2fe","sha512":"c2c0b2cd39d3e338d5a56c5e5d9f26708341e44e6f7a7080db61814418971e4a0bbcf72ad786a7d1178aca1cd0443ee77207bf95f1120dde48b9106b5a397cfb","ssdeep":"768:88wvXFz1EdMOnP6FeVFMF530Cbms3LWg+6O2HFzR:88wvXF1EdlP6UVC7bms3Cg+6O2HVR","tlshash":"d713989f7aa3110c786aa6b96abd3a12b745d453d38edce379c4206ccfd46d00ad274c","first_seen":"2024-08-29T17:20:29.816202Z","last_seen":"2026-08-30T04:54:42.434651Z","times_seen":336,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/wow.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.944Z","timestamp":1788057238944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/wow.min.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHZnHdTE71TMQuHcWgBtviA7%2BzxHautr%2Bm1sLfedxOUcGO3f4utXXmCzfxiql2GAVPwknCmuoZc%2BYtbeXjNOLNhkYgm3tpDYoV7a%2BIPvWlq2fHAEXzBaDR%2FP7FXWDY1i1j710SjB\"}]}\r\ncf-ray: a33064cf699ab51e-OSL\r\ncontent-length: 2529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8183,"size_decoded":3285,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8152), with CRLF line terminators","md5":"ed4b12ef0f7e4bf5d5ff3555d18718cb","sha1":"258fa26dec8fcf4769d49eaca6712ef56923673e","sha256":"3162b6468674133d7b6c903e4b8a06f7faf51216d1e7f8b3edc8f326b1bfe461","sha512":"40d8f96697d393a5301d2960394cbea52ea64330a8b706a0982e9b17176bfc0d55394dd4f0fbea2cd1798c938e66ccccc671d803b2802f8b37c2c41f40c1200a","ssdeep":"96:xrZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:xry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"17f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-08-30T04:54:51.777285Z","times_seen":2657,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/main-banner2.jpg","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.959Z","timestamp":1788057238959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/main-banner2.jpg HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tBGkN%2FjaIWx08JELtCYQA6fQ3kh3RWbr52PlIUTX5Jlmb%2B4hitsqyq3hwet%2FFK%2BNAc0acIw3vfRDrTEoHYSB%2Bj%2BRFN%2BYIkaCuofoGd43%2BRIkI%2B6F2Zb5wnRLvN75%2FWya11wxlINP\"}]}\r\ncf-ray: a33064cf799fb51e-OSL\r\ncontent-length: 176206\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":176206,"size_decoded":176970,"mime_type":"image/jpeg","magic":"PNG image data, 333 x 500, 8-bit/color RGB, non-interlaced","md5":"9bd7f16a525c819fecf84b526735ca96","sha1":"909319e17fbd5d712149476dd62d36bf39d40880","sha256":"c9d463431eb53ff0cb84fe062468d1eb6c395758967007edba1b78b22bfd3daa","sha512":"e0d4115408c14d663c2cef76a02cf073b7880d42c89c8f67c7dc72e601fdf6f2c00b63ce1ba5309fee132cfe1fe208341436c08f007d897d8a8721c09d68e69d","ssdeep":"3072:1sUBiFs8cERrKxCPk8MiyvBxe8D6l9QbHZVH8gzIxL4lo7X+F:1sUBiFtvKIPlyUQbHzcgzIxLOo7Y","tlshash":"f50422afd15acd801334d71c2b2d2de981bcb4a4963ae9063c65cac755fe39a524f8f0","first_seen":"2025-09-07T19:34:52.134989Z","last_seen":"2026-08-30T04:54:51.788432Z","times_seen":206,"resource_available":false,"data":null}},"time_used":1263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":907,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/vue-dompurify-html-fUtYD0FJ.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.935Z","timestamp":1788057241935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/vue-dompurify-html-fUtYD0FJ.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Fri, 28 Aug 2026 19:12:01 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 28 Aug 2026 18:52:08 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 112920\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: Ihy7Rvnf9gg0wPHkP35q3gsWcAs2PpSvdDJ5ZZRPoo9eDYV3FmDStg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":136657,"size_decoded":58120,"mime_type":"text/javascript","magic":"data","md5":"c7538b6213c226329c79acfe8b06eca1","sha1":"1acb685547f558634b5c6ce526dc72769a8d564f","sha256":"425433229c372a030d955c23561e08c76efc62fcaf9d10a52b99facec3aca253","sha512":"0120913c2249debd41f63ad386d372dbf3a8b891248c07923be0ae32aef9014507a43ad4d2d325c40ba6f6e95c4bca75213cd806d0c6b65f329b9b8f14200b1a","ssdeep":"3072:eOc0x7NKoAwgF9/zAn8+9oOzDJfMpuZJi:eOcyKInvocFfMpuHi","tlshash":"b7d36bb434d26c7543e239da587b2509e5790919340cc8a5fa8cdceb2cb666670ebf3c","first_seen":"2026-08-30T02:34:42.278879Z","last_seen":"2026-08-30T02:34:42.278879Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/index-BGfh9Qyb.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.942Z","timestamp":1788057241942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/index-BGfh9Qyb.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Fri, 28 Aug 2026 19:12:24 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 28 Aug 2026 18:52:08 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 112897\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: OM8-mBr4A61N74NK0qHSrJWGjHpnYwWsuXSuoBj1JMLm3APMljFPIQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":339834,"size_decoded":102510,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"2e9f1d1295aacf5c22c7cab14f7238d4","sha1":"6f427d94d1f214acb5d01a315c45a965efe3a20c","sha256":"187d196fdcefb8275cc45553f775ac2d14129f79c66ca0ef95702750365e4ce8","sha512":"1762ad5ee47411c8ef14e89f30aad507c065722400e0955b8f2424f534c1e8493b2899516e7a0b857f5a2998b321de211518093c1bd163a8a9649ecea2905505","ssdeep":"6144:52uIe7zlIqLWIIFKtev3y9CbB1qU8vwaasdr:RIeHnLWVFKtq1qUDb2","tlshash":"7f747cdc62d230a0476200d6705b2407f27e9c36626dc5e1e46e9d6938b8cd98afbf7d","first_seen":"2026-08-30T02:34:42.281431Z","last_seen":"2026-08-30T02:34:42.281431Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/api/v1/widget/campaigns?website_token=M623GeXuD2wcdUy1kgLxWb4q","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:02.212Z","timestamp":1788057242212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.chatwoot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C6:C8:CC:4F:B9:19:54:D2:08:19:4E:7B:F0:17:6D:EE:13:74:FA:40","sha256":"F4:7C:47:E4:AD:14:81:EC:91:65:5F:6D:FE:68:B2:7D:78:E9:19:CB:8C:74:D7:83:88:4E:D0:DA:06:66:8E:98"}}},"request":{"raw":"GET /api/v1/widget/campaigns?website_token=M623GeXuD2wcdUy1kgLxWb4q HTTP/1.1\r\nHost: app.chatwoot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiJhNWUwNWVjZS1hNjNjLTQ0NzgtYjNiMS05YTRhZjI0YTJjMmIiLCJpbmJveF9pZCI6MTI2MzQxLCJleHAiOjE4MDM2MDkyNDEsImlhdCI6MTc4ODA1NzI0MX0.a3RDUcyEW8uHogQG7yP5mXtFLxpn0cd64bh0cEExaC0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"4f53cda18c2baa0c0354bb5f9a3ecbe5\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 2ef830cb-2c76-46e7-b439-288cb6163f49\r\nx-runtime: 0.010073\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":511,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-30T07:12:22.322199Z","times_seen":322437,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/storage/app/public/photos/XsZyKbcIhMUZU7C9BK97TO7bVhAW8PgXoM7p9VYx.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.958Z","timestamp":1788057238958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /storage/app/public/photos/XsZyKbcIhMUZU7C9BK97TO7bVhAW8PgXoM7p9VYx.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Wed, 05 Aug 2026 12:25:23 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SE8fWx5SFzz1hB%2BWY%2BiOI435QtSBq8btljPkg4qdG2f2mf3ApdMGFm8cL1LjlPKyta0vnnysPsvZihiRkHaCXMMDO8DaqfPok6Il6XOujW%2BDlPu%2FkDm7XN%2B5GXCHggGXnMt7Lfuh\"}]}\r\ncf-ray: a33064cf799eb51e-OSL\r\ncontent-length: 14927\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14927,"size_decoded":15679,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"b2adba48c6cafbb2d6fa7c86475ae26b","sha1":"b74a75b19ca44b6da38610afd2be5cbaf3fa7559","sha256":"de2608299ab54d304bcc2b7f7968d1177eec89c47abb81edf837cd1a6e76874e","sha512":"42cfb01767cdd5f7422dcceedd0c5b22dd7e96a959ba2f9424034b7f71820aecf3d062db5a76ab7e7ddf016df0010b4f100eb6e20d941594655278feeb8139fe","ssdeep":"384:WugzzxPRlZDckJt1HjgyQRRtIS599Q6LUoM4vuMwXi:iA6XuRtIMDYoFuri","tlshash":"8962c0bded21a5627f9e31b04eeda74887031141bac4a993a1e444d36b704d5ddcf2c1","first_seen":"2026-08-30T02:34:42.288469Z","last_seen":"2026-08-30T02:34:42.288469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":912,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:59.618Z","timestamp":1788057239618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Raleway:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Aug 2026 02:33:59 GMT\r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31212,"size_decoded":1689,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f9308d064c8d95dd0d7f2b751df606c5","sha1":"697a5fcaaf26c9e959e578ef1483d9f096cea790","sha256":"eda15317dc0fa78f70e63940730f5e04d9a934951bbc55e3348ccbf6302aacca","sha512":"9c04884c77d7e5ffd39cd1a2508818e944e2d944821904f8a1df452e6ae993ce7505bc9901f6a42f64b788f7374b1a4fbdc98788b2b77449ee12f0bc65ae9124","ssdeep":"384:g3rw38T3z3M3dowhTCBERwmTx2nmwbTor2fwATXw5Mw1TGVQlwaT1ajKwvTs/yjp:UgYTgg2yr/F","tlshash":"28e2aca1091bd040ab476dc667cf3e36ee4e62147046993a9bfd58fcbca6d3613a070d","first_seen":"2025-09-10T18:04:04.291313Z","last_seen":"2026-08-30T06:00:41.304075Z","times_seen":2706,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:59.763Z","timestamp":1788057239763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://orivstrongholds.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 05:14:37 GMT\r\nexpires: Fri, 27 Aug 2027 05:14:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249562\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-30T06:25:18.682343Z","times_seen":34915,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":29,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/module-DV9-IjSK.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.944Z","timestamp":1788057241944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/module-DV9-IjSK.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Fri, 28 Aug 2026 19:12:01 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 28 Aug 2026 18:52:08 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 112920\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: ycuo9pXxPEKEf42BlaTxXP9bZBgFJioGnT7VMW8PUKTicqBRtmSC5A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9613,"size_decoded":4733,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (9568)","md5":"33502ba0d1968c5627187df98be23016","sha1":"a87fdb03950c4c3011035106be3dad873124260d","sha256":"0eae16d78b1ef8a3c502b7497f84c6839e4b1b161aac714a19ce64f8134e168f","sha512":"32b7151a2e72824f8f5106a46dd1b1350079633462991e1804be437b07e9c93aaf5e67ef91145906065636279eace4b1e34ee4cca1e2bc9b8990253e8e432937","ssdeep":"192:6oAWbIuugGZvOlsKY/aGkoVj24tNs1FsyXJzob1jfgIjoqtP:6o5IXBWYvkotskyXJzoZzgCoqtP","tlshash":"471274f51a6c66ed35474f69db73e524db2f68b239bca0f05a2fe5b490935c0c213850","first_seen":"2026-08-30T02:34:42.298431Z","last_seen":"2026-08-30T02:34:42.298431Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/Branding-Bv5d2FoZ.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.947Z","timestamp":1788057241947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/Branding-Bv5d2FoZ.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Fri, 28 Aug 2026 19:12:11 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 28 Aug 2026 18:52:08 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 112910\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: f3Tcd0pmfOIa7y1EFmt-mS3ncEtni4S8CkDxBnmQ5rrTyotg6Ih1Ag==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1552,"size_decoded":1403,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1505)","md5":"1243de9e1f75bd7ba6681142bc4dd6c6","sha1":"b67755bbda74e6f4658df02928f67a2f3e8dd2b1","sha256":"dee5bd427836c1d92b04a899ab7588a3614a1989160d8aac65ed01cac2efc079","sha512":"ab0e4cf88237485d32626858d56c3640fe581f8e84d5c02beac1ad69596193e0a8f9f39d527281af22c10c56f6b42082f9f92030260d8f82ef98b58364547977","ssdeep":"","tlshash":"b831ba5d6af657ba86d2012fe0e1a800f44f1eccf22d9cccd09d50172e3e95164687c5","first_seen":"2026-08-30T02:34:42.300823Z","last_seen":"2026-08-30T02:34:42.300823Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prod-chatwoot-assets.s3.amazonaws.com/vp24rx05cqr6ot0wsn72mz7ixjqc?response-content-disposition=inline%3B%20filename%3D%22FES%20%252813%2529.png%22%3B%20filename%2A%3DUTF-8%27%27FES%2520%252813%2529.png\u0026response-content-type=image%2Fpng\u0026X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=AKIAX7PDOLKIACEXACHP%2F20260830%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20260830T023402Z\u0026X-Amz-Expires=300\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=6e9d977358475031762bf7f4df11b08e6dcca7ed92af3a16804eb1ea6a2a680a","fqdn":"prod-chatwoot-assets.s3.amazonaws.com","domain":"prod-chatwoot-assets.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.39.169","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:02.457Z","timestamp":1788057242457,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /vp24rx05cqr6ot0wsn72mz7ixjqc?response-content-disposition=inline%3B%20filename%3D%22FES%20%252813%2529.png%22%3B%20filename%2A%3DUTF-8%27%27FES%2520%252813%2529.png\u0026response-content-type=image%2Fpng\u0026X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=AKIAX7PDOLKIACEXACHP%2F20260830%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20260830T023402Z\u0026X-Amz-Expires=300\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=6e9d977358475031762bf7f4df11b08e6dcca7ed92af3a16804eb1ea6a2a680a HTTP/1.1\r\nHost: prod-chatwoot-assets.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: RDr8eQmQiuy6B4hvPxZWQf1oAA9/iUmw2Kepa5x8AtBa2tB3IuqLE3lgC4KizpUaPeSJdyjusAQ=\r\nx-amz-request-id: X1721PN1MW0Z7HZA\r\nDate: Sun, 30 Aug 2026 02:34:08 GMT\r\nLast-Modified: Wed, 05 Aug 2026 13:05:15 GMT\r\nETag: \"38c37d94a4c9355d7b736c93be6b7ad4\"\r\nx-amz-server-side-encryption: AES256\r\nContent-Disposition: inline; filename=\"FES %2813%29.png\"; filename*=UTF-8''FES%20%2813%29.png\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 24113\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24113,"size_decoded":24604,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"38c37d94a4c9355d7b736c93be6b7ad4","sha1":"be6397ee55ccc34013a35c336a806b0e1185641f","sha256":"22a38a700632ad5c3b325416e0fc78c2cb09d3ad254e8909c3f45149927cba48","sha512":"d55f4ed926a1760f56a91dd776bcb021e9e03c5a8dc89cdcf954dc0fb13586728a4aed5d98733b8651d0fbb0bb66ea559cdd83613ffab94207c8f15eb6050aad","ssdeep":"384:wgz4xPZV3gCmN1dDS0a2hfi5UtVfMeTj0Ml5kY1thgN1P/JHzuDFw5pcWRKNn8Td:OBgCK7drtVfM4jtl6I3C1HtX5ueKNnwd","tlshash":"94b2f1c8fbb411529a0f7a384d4f26448ba7868a388b57ec31c69c531ed2d8a1a5f207","first_seen":"2026-08-30T02:34:42.302662Z","last_seen":"2026-08-30T02:34:42.302662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5673,"timings":{"blocked":0,"dns":5,"connect":103,"send":0,"wait":139,"receive":308,"ssl":5118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/owl.carousel.min.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.701Z","timestamp":1788057238701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dsVChMl7FaZVvwlukTdwjjrm0Fx%2FNgn5G7yO7J2zAUscef4PtJAEPLgDm6PMCaqzZ6KK0%2FWzkg6iB1TjZf9XUdQy0n8BmkGqNJbqkc375Rw%2FR8GctOJQi2%2F4obNIyfaANz470QSq\"}]}\r\ncf-ray: a33064cdd987b51e-OSL\r\ncontent-length: 912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3358,"size_decoded":1707,"mime_type":"text/css","magic":"ASCII text, with very long lines (3186), with CRLF line terminators","md5":"f999392859d1b921f83a84adb77be572","sha1":"1cd09814267e2033eab27dac1a594e80e647c212","sha256":"4c04da57afb7c99fe3485be1e8a53273116dfd3043a504f94222a89aea345136","sha512":"ad5bf8feb977b794d2dc5d18f69e9d55ac84549b2ad3f0e71be46dd2e1f9b1b72c4b037acb7c311d41bb2a8d18ecc470c5f55e505cb6fc93d9336aea77b84dde","ssdeep":"","tlshash":"e761cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd31447dae6d213ffcf","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.767097Z","times_seen":760,"resource_available":false,"data":null}},"time_used":947,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":947,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/odometer.min.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.708Z","timestamp":1788057238708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/odometer.min.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2BKO4X8GD%2B0%2BkabiNIDoBSfOehSatw7xbGA3hx%2BZe2YqAphDf47IddkTRZNdpR8WXq30Fjt8zE42BndX03zztwKJRQ9xplIX%2BgHXaGBTZLkjskq2jqEShde%2FvyyNLbDbgsyFgj5H\"}]}\r\ncf-ray: a33064cde98ab51e-OSL\r\ncontent-length: 436\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3274,"size_decoded":1235,"mime_type":"text/css","magic":"ASCII text, with very long lines (3251), with CRLF line terminators","md5":"33857183503886a3ea32dd5f475ed489","sha1":"6a702c75c57ee5cd30c4fa6fd22a6e5ce19ee58a","sha256":"53c8d41573daafb7177733ea705128818a28503ddc9bfc261a9988199b6069c6","sha512":"5800187f2f7656cee966134f8c67c75004a533403f4ceef58b053be20e912765bd1f2b65f68b3c9c0ef303b5511c1ccc2d9ab12d399f1103d6fa0be716c7bea2","ssdeep":"","tlshash":"4e61f5154f90036863367506bac81760befce9515123e98eb35ea54bcf43db9e398b0b","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.740603Z","times_seen":772,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/style.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.709Z","timestamp":1788057238709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/style.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FRFZ9u0tG695KDqN0JSY3kjVH7kBAcHCWf1IpJt3Wy49nSV0i%2FnC17IoN0RHC92GJXK6C9vEGU6aEcQI%2FoVpPOe%2FZmKAImy32fERiuLsmlp8zM0D%2BQ8uji1hrY%2FHTEIqOjlO5UqA\"}]}\r\ncf-ray: a33064cde98bb51e-OSL\r\ncontent-length: 16864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":155715,"size_decoded":17665,"mime_type":"text/css","magic":"ASCII text","md5":"2f48d50b42acdcffe5d9e5fd20b7237c","sha1":"ba0cb591de881029a3a36f0630b5133dfd90ccac","sha256":"4655f9d69b73295f521d26f7339aa565b0d235304823c167efb7d624d22047c8","sha512":"32559c77b3f9d5104f47e9a7bca65845476d725951ef54c603ee8daa9ffbb5a444c5c0afd826b57e610d64f8c14bc3ef3ad5637e986207559af340b8d05da783","ssdeep":"3072:m2KQRe5PUk06PSEnZB8BcgSS3ZQhqLpDpViAnL2Moc2S0YWHZj5JOQ9ZBbqcVNyA:iIe5Pf06VWc+3ZztFL2MP2PlHZmQ9PFH","tlshash":"4ce385d55ba52144364f90a829e5eb142fad50c3ea4fcdb97af3604cbf843881167f1e","first_seen":"2025-03-07T12:16:50.182098Z","last_seen":"2026-08-30T04:54:42.420174Z","times_seen":313,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":902,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/invoicing-image/3.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.965Z","timestamp":1788057238965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/3.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mQnW7v00wR3I%2BVf6Ulc8tyauXaZI6PaoV3gUsB8JgS4r1zgfr3JgnuRnNrTAK3VWl5AqRfD%2Fi2mhtxyd%2BtadgwH53%2Fn3FiOBqruGvbGFNVqnD0bFkTqUFIN3X9Cd58LGuqt%2Fqaa6\"}]}\r\ncf-ray: a33064cf89a4b51e-OSL\r\ncontent-length: 7911\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7911,"size_decoded":8662,"mime_type":"image/png","magic":"PNG image data, 263 x 241, 8-bit colormap, non-interlaced","md5":"b6c271674d0f2805e789c2e76520173c","sha1":"d886710c03e7abb3bab526215605bba07c22cb92","sha256":"b95df0cd387779894568be922e2ca845497f455e397bcc8c0c6bfc0d235d137b","sha512":"e5c840c290c1a71c61b41e554d7566a1586c35b2115f238ee779c04ea6e97175a40ee972389d436d3edaf325275cfaf227b11e0d3e45b396bfeeaf3b0305b820","ssdeep":"192:hiyzhvrKRoHLXlQJlsMb+7G/QzPdf7e1D+1MGn44ve0:hrtpL1gb+76QzJ7ep+1Pn/e0","tlshash":"d8f1af8bb45c8e6f95a8520d13f52a1676044112f3c5076c3a4afcbb2e183eaaf88003","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.742057Z","times_seen":559,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/invoicing-image/4.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.966Z","timestamp":1788057238966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/4.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnbzKx81YI1C9s5KNBjlvMptzMicsQPDNDOguVZIb1QdTvOc5M6FL3Egntuo3m8L9AygD%2BtrnM08eDJwS3XTiBzyLHOPHV7coNiIShyXTTK8Q4wAAUNFaG9Dq62Plc4uPP8LpYvF\"}]}\r\ncf-ray: a33064cf89a5b51e-OSL\r\ncontent-length: 10230\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10230,"size_decoded":10974,"mime_type":"image/png","magic":"PNG image data, 265 x 253, 8-bit colormap, non-interlaced","md5":"104d3badf1ad26c48c6dd2979d8311e1","sha1":"914b2a40ec189e760998009d7f9c1925a62c3fbd","sha256":"60f9c169c73ace0533f2d8129220d72e650956ce2486fbaa37e81f2a5e10257b","sha512":"2dc2c8e8fdfb4977d9b7d6fcf2b4e45b5014eb0776c6bd9477b097fa6cbde9e1a555668bb8962484adbea629c077cecf3a4c117fc69972e004013ad93467a3ed","ssdeep":"192:v3AbHQbwHuu2QU3+9vAVi5+2ZZlgOpR/+iJcDK:fAbw0o6IVu+2ZwOX+Ccu","tlshash":"0122c0841dd5bd0b6f1da7b66f635badf3861e980f738fc3fba0193a005018068a75a4","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.747784Z","times_seen":571,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":919,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/fonts/Flaticon.woff2","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:59.760Z","timestamp":1788057239760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/fonts/Flaticon.woff2 HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/temp/custom/assets/css/flaticon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:34:00 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:34:00 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FnPylVuA3%2BMEq0TGl%2FIdSyF2HCeerbHadgD38Si2qxXtmOKpCfMpjOWsRYe3Inzm74M58QRFnnK2BNnvI4Z6CiIb5q4BUVSc0f%2FUvwb9GtO%2Bantcs1WUO5j6weOVLJ1e5xlssh2s\"}]}\r\ncf-ray: a33064d479ccb51e-OSL\r\ncontent-length: 4012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4012,"size_decoded":4765,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 4012, version 1.0","md5":"59a3e44fffe01a82bd2c76e1b0b35e78","sha1":"058a144b3f6b5648c4dcf87f9be917be1ad97bb9","sha256":"8a0cdff6e76a8bbdeb9b412165ded677648e805fa58a39d5feedd20743f4c5fa","sha512":"337d05e3691e5c112af5d33573f349c66d60efaf5d83aff8c4a5b337b66be6dd7d7e25787462ab584e23b492c48d77161257ef20b8f5cf42663127c328f1e2ab","ssdeep":"","tlshash":"fb816d06b44db340cc16f131402742f7ba778699e81d152cdf4e564fe671b20b9abe46","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.762085Z","times_seen":634,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/index-DJvsux1d.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.940Z","timestamp":1788057241940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/index-DJvsux1d.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Mon, 24 Aug 2026 10:56:46 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 24 Aug 2026 10:31:55 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 488235\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: _IxJVmQAJQ5hb41Zbtts8in4mm43lP0wO4IhSaAhm62A_zl0KMkG1Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21776,"size_decoded":6602,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21732)","md5":"4d35a4cb35259802dbcfd721c8812f2f","sha1":"513ddf925db5ad16d0a767dfcb22c9a7053aa4b5","sha256":"7fb890335371c58c97dcc03004e96b370020f2e9ac5e05e20c9eaf4f5537ab38","sha512":"bbbf873e886df91633c9f3186ad271df0a34de8600d76f980f8e1cdb95b699f9a46090fa0439c976027835e7d21a89628a75ea6917dd45635be96ddceb5fdda1","ssdeep":"384:BdgMUXwkGVsxelSRLcG6dQ3e0Q3MFQSKPLT8CADcAQz0SJ/unUtAprKr:sXwkGVsxelSRLcqfQ3CQSVcX0SkUtAp6","tlshash":"27a265c075c7b22a57639a69400e0509f11e6a71fc8fad11f496e7c2f8a7912923ffd8","first_seen":"2026-08-27T07:23:15.410938Z","last_seen":"2026-08-30T02:34:42.317282Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/magnific-popup.min.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.697Z","timestamp":1788057238697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/magnific-popup.min.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3jNKQ%2F8Hce2lk8So07JJvo3SIVfR2hhO%2BwZE6BBpOv4A%2FfV1XFfsMHrzcaTrHyamN443%2BBDAu9sCbvWsfCavk8Wsgvh%2Be3GJEX35aF17oW3n7zYsfCjKnxuYILm%2Bh7f2Fr4aXgV\"}]}\r\ncf-ray: a33064cdd984b51e-OSL\r\ncontent-length: 1410\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5259,"size_decoded":2210,"mime_type":"text/css","magic":"ASCII text, with very long lines (5259), with no line terminators","md5":"64912a79884a20761ab19de42f85218c","sha1":"8d29cea8f84afdcaa69c0594e37263f7374dc8a6","sha256":"3d92e113ac3031b838001ddddf965d045f470ff748ff2e116b30378910eeaecb","sha512":"f84a0fc3e162c21e9e49e44aef3c08286d8c03c8b7ad5fc319aded76db501a05b26ad1bf4a49dc4f9dca1d0692e4987d30d393ddd9852f41634d8d3c02777f0b","ssdeep":"96:VuKSCO7EWP9UrJjIjZQX8ZO9d5Zkxudls5/Dm5Mk9nCWh3:VSCO7EWP9UrpIjZQMZO9d5pd+qMk9CWB","tlshash":"43b175f3a941313ac633da16d5c39f9c3227a227f663569fcf82a419c6ce89c0525384","first_seen":"2023-04-05T08:30:27Z","last_seen":"2026-08-30T05:22:56.312496Z","times_seen":5476,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/parallax.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.942Z","timestamp":1788057238942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/parallax.min.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhCeynoTrY7qVIuuBHClmCRdavgJCWtgkNIlwiNEe2jp17S9OUjASsPTPHIXUbKmSBZta0cUxcUJqAplKmM0S7P%2FglPihLk9fKzvcFwY2p67DcPs%2FOTNsr%2BOoJMHGmz%2BC1s0ouyQ\"}]}\r\ncf-ray: a33064cf5999b51e-OSL\r\ncontent-length: 3805\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13302,"size_decoded":4559,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (611), with CRLF line terminators","md5":"9a9a9442f70e0807475a21b835dce50b","sha1":"7b4755ab79dcfbe1aecb13823f78997061fd1b8f","sha256":"fde3fba1a1c3dbae530a58d3a542369cef2e0000685cb299a265e721056d4201","sha512":"20a1dd28d273d407d096be59beb4a92c260791d1cf16019cde84651f22fd69f9a62950dae7addb5f807452a32afaa02b406d72f5d79d43d8caa9716960919cb2","ssdeep":"192:t0PtdiPwbyxVZ8343NiOAZSUa89Fr15FZxY8wb84FxDco+W4+D:t0uPwGLsgNiOAZSIp15FZ68wbZWWl","tlshash":"3d52a8453ae6111502ff73ad609f57087528a232c52ace1f7c3dc2d8a580b8953bb779","first_seen":"2024-08-29T17:20:29.824917Z","last_seen":"2026-08-30T04:54:51.73492Z","times_seen":367,"resource_available":true,"data":null}},"time_used":854,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":854,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/1.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.960Z","timestamp":1788057238960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/1.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=biqBTZv8xznCMGwutA5E5hAz2jPeJyQLBl5EyM8bm8qkZIZU8aCUUcp%2Bpvk9mkyL6JTnxlDahHff%2B5L1MOJPLNqNvqKLwDxRUw2xI7sQQrzBhMqs4dQz6cpBbUpxjHQESgNg5JiD\"}]}\r\ncf-ray: a33064cf79a0b51e-OSL\r\ncontent-length: 26015\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":26015,"size_decoded":26761,"mime_type":"image/png","magic":"PNG image data, 643 x 549, 8-bit colormap, non-interlaced","md5":"ed658f5b5db3a2af058849799dc5d7fb","sha1":"9ebeab3076cd153296cf536941d817ef4bd347f1","sha256":"547a51b8e826dcfb618037d9ae63cd7dccc1b27a42931a60bb97ebd35f30557a","sha512":"f4e4ea1a7a5a932d1999bd9bc77c29a6a82a55518892363a1349ae1d8c865bc2533eb51753995303228f2db96ec7ad112562518a8bb939d8e210a79244e9ca58","ssdeep":"384:HjVdAf1VzD2WmCnGttPgZUEiCJG4pbP2Huu9P2qDBRlgLGble/OKYkRXm1:5e95C4ZUEiaG4FxqD/0Ale//ho","tlshash":"81c2f1833b93df03d53112e15fc0ae6b5783ee114e638848fb654509515c6fa5be0e27","first_seen":"2023-11-18T02:28:27Z","last_seen":"2026-08-30T04:54:51.792269Z","times_seen":331,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:59.617Z","timestamp":1788057239617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Aug 2026 02:33:59 GMT\r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64800,"size_decoded":3062,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2b0492055bb5b23c5ed11d557a9c290f","sha1":"26e59353da26632e9cdbddd804cb0f526f53fc00","sha256":"b56d6d4c80db94680717f75c471851d4ec67f81078099e54553046772b0f90a8","sha512":"d86e4e14d6f2cb643dbf842996ab4d78eee181f4fe7d3f0ef292798252541396c6806f76992a772a18258527a5c94e10eb7d802ec3bde489a72bcf50e5ee65c9","ssdeep":"768:yFdF9FAFNFgBFUKF7FnFwJpK5g9UEf7h4YXogEU9SWWjD8TgfUS9hMNtG9g5UoTV:wE9YIWHHIHTxj","tlshash":"83531da1041b5440ab834ce223ce7e35fe0f92547141d075ebfc9b6baedbda6526836c","first_seen":"2026-02-19T22:23:13.630851Z","last_seen":"2026-08-30T06:28:19.688691Z","times_seen":7300,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:59.807Z","timestamp":1788057239807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://orivstrongholds.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:06 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 316973\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-30T06:27:12.519342Z","times_seen":64937,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/storage/app/public/photos/XsZyKbcIhMUZU7C9BK97TO7bVhAW8PgXoM7p9VYx.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:34:00.751Z","timestamp":1788057240751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /storage/app/public/photos/XsZyKbcIhMUZU7C9BK97TO7bVhAW8PgXoM7p9VYx.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:34:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Wed, 05 Aug 2026 12:25:23 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWTNy0TMSlmvMouRd8WT1pVoCyUD8mzZ3Gx%2BkPrf855EMQU9s7vzMpFFkGGc1sT%2FrvMDs62zC%2Bt54J2aUB4swP2SJJffVxQZYh5XljwBQQhSbTofTkc7z%2B%2BPubQ1E4Y1tpfXI8Ii\"}]}\r\ncf-ray: a33064daa9f8b51e-OSL\r\ncontent-length: 14927\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14927,"size_decoded":15689,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"b2adba48c6cafbb2d6fa7c86475ae26b","sha1":"b74a75b19ca44b6da38610afd2be5cbaf3fa7559","sha256":"de2608299ab54d304bcc2b7f7968d1177eec89c47abb81edf837cd1a6e76874e","sha512":"42cfb01767cdd5f7422dcceedd0c5b22dd7e96a959ba2f9424034b7f71820aecf3d062db5a76ab7e7ddf016df0010b4f100eb6e20d941594655278feeb8139fe","ssdeep":"384:WugzzxPRlZDckJt1HjgyQRRtIS599Q6LUoM4vuMwXi:iA6XuRtIMDYoFuri","tlshash":"8962c0bded21a5627f9e31b04eeda74887031141bac4a993a1e444d36b704d5ddcf2c1","first_seen":"2026-08-30T02:34:42.288469Z","last_seen":"2026-08-30T02:34:42.288469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/owl.theme.default.min.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.704Z","timestamp":1788057238704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.theme.default.min.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLuiU6f%2BfQxpLFjqaVSeMxrJT6UBBlZon8tlYLhPWwwxu%2B4xqRBne7pyV1kCM95sqGr2XYnxm1%2B2Yo3Pbcs0gPwNpiC%2FRj%2B3bJO1WE1oJF1IfgV5fhAqvBleuaehqFmKkGXOXYql\"}]}\r\ncf-ray: a33064cde988b51e-OSL\r\ncontent-length: 376\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1019,"size_decoded":1173,"mime_type":"text/css","magic":"ASCII text, with very long lines (847), with CRLF line terminators","md5":"f13c9109b79ef93c06e22c3542625b72","sha1":"424a8746184ae7d2be69197cfd9b3c4032238837","sha256":"33dbcf6a027199fab7bca71ce31c80154051a658f69ef98e7ddad581fefae1aa","sha512":"7cd94029c79a246846c89dfa82244334fbe284d86863989d69dd96d54f9d9c33231d8048f647a7a9c94810ea8b618314dd579a528ae2f9461f290490434a10c4","ssdeep":"","tlshash":"5b11abc5b189221d3023c18046a842cb6b1e687e529d1af5f8ee9120c32dd053a6f7f9","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.751258Z","times_seen":1054,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/magnific-popup.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.937Z","timestamp":1788057238937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/magnific-popup.min.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=noA%2BvvPYFqE920Fmy2GGFqP%2FSJJVfQdRa59civZPB1lR1LOBCzDteJ%2FsOwYSGyrt06%2Fl381HjulpJ4sfeJUX6VOrBhYxw8u%2BItNovIp1yRIYEcr%2BCw3bBGKOwK2%2B4Zdim1lgAPwG\"}]}\r\ncf-ray: a33064cf5996b51e-OSL\r\ncontent-length: 7046\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20219,"size_decoded":7806,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-30T05:29:15.275592Z","times_seen":25399,"resource_available":true,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/storage/app/public/photos/gVIJkiwJLLefSbUbt6deIVDrtilJ0TxeuumWpwyk.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:34:00.752Z","timestamp":1788057240752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /storage/app/public/photos/gVIJkiwJLLefSbUbt6deIVDrtilJ0TxeuumWpwyk.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:34:01 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:34:01 GMT\r\nlast-modified: Wed, 05 Aug 2026 12:25:23 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EdT5qPGpSgKC7r4HdpmtxY8WSMa3WhzQa281ga0BqP0Qb7R8I%2BSUMyplorJtUHI6021TIuNSoQhNqnSgh7rjc6b7c8lq%2BNUnc2eeGf0iqBt83j0Ji8ea2C2KcEv7VHdOm%2FXMTOIK\"}]}\r\ncf-ray: a33064daa9f9b51e-OSL\r\ncontent-length: 26671\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26671,"size_decoded":27422,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f81cfa0b700f60ee1c82b19ab9ba91fd","sha1":"dc333f9090dbb7b9f65fcc3c68cc2d14e9d5d8ef","sha256":"de0774b390fa9bfedfea1db4389e68b6f92ff96f1ec3310bf1c148e98b1f3370","sha512":"f995329c5cacab8ea60e11b94016b1467d8930eb815c557d72a422c6ab0cf7f0bef1913467888961dca03fc511a39b4f04ce6624c5370d7822e6101144fa54c8","ssdeep":"384:/6gz4xPg1yCckX3MTuuXBZGEfsPUeqMv3vaC8eH+K/kOSHK0R5xV4yOgt3pF50Fl:ImXxYeCwqyxeak9F4yOgt3pFuFFChhJ2","tlshash":"fec2d0785a21023487ad7ab4bcff1490054bab5df6129383b6b650630d73db07c23b97","first_seen":"2026-08-30T02:34:42.327344Z","last_seen":"2026-08-30T02:34:42.327344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":967,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:34:01.592Z","timestamp":1788057241592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.chatwoot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C6:C8:CC:4F:B9:19:54:D2:08:19:4E:7B:F0:17:6D:EE:13:74:FA:40","sha256":"F4:7C:47:E4:AD:14:81:EC:91:65:5F:6D:FE:68:B2:7D:78:E9:19:CB:8C:74:D7:83:88:4E:D0:DA:06:66:8E:98"}}},"request":{"raw":"GET /widget?website_token=M623GeXuD2wcdUy1kgLxWb4q HTTP/1.1\r\nHost: app.chatwoot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:34:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 9376\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlink: \u003chttps://d3smg0hrzo6i7w.cloudfront.net/vite/assets/widget-Cxg5VsaY.js\u003e; rel=modulepreload; as=script; crossorigin=; nopush,\u003chttps://d3smg0hrzo6i7w.cloudfront.net/vite/assets/widget-sjTlNeMX.css\u003e; rel=preload; as=style; crossorigin=; nopush,\u003chttps://d3smg0hrzo6i7w.cloudfront.net/vite/assets/useBranding-DSFJg_40.css\u003e; rel=preload; as=style; crossorigin=; nopush\r\netag: W/\"337abe9d3aec762eec0fdac225764018\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: _chatwoot_session=SxR8yN4BJZUK8sFqZsXdUgLSPeqzvORnawIr9yp7sbUJZBiC%2B9iduPMi4K6ep2QaZ9OCuFSwKIoU1DZPHZany1oKAb9Q0UoC9EkN7kid1j4h1g%2Bt%2BJjiFFq1vdU94ykZS74pDUFOjaixIxCGH4nm%2F%2BKObwTBaNZG7xvpRLQ1SzFkNaoievVD1rc0vE8bsj%2FJLeQg2tIquQjd0KushATHfRy%2F2aNPz05j1%2B6SQ7L7AFzOeF5NNbhlyc0tnkLEEjRVQSOiBBSLpC7PkICQP8KXY9mhEDIK6qx90A%3D%3D--rgPpphL5Lc69y%2FZX--QYOSu0awPNly0DahBia70Q%3D%3D; path=/; httponly; samesite=lax\r\nx-request-id: e1d39893-dfae-40cf-9878-d8efb9a29531\r\nx-runtime: 0.063303\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"_chatwoot_session","value":"SxR8yN4BJZUK8sFqZsXdUgLSPeqzvORnawIr9yp7sbUJZBiC%2B9iduPMi4K6ep2QaZ9OCuFSwKIoU1DZPHZany1oKAb9Q0UoC9EkN7kid1j4h1g%2Bt%2BJjiFFq1vdU94ykZS74pDUFOjaixIxCGH4nm%2F%2BKObwTBaNZG7xvpRLQ1SzFkNaoievVD1rc0vE8bsj%2FJLeQg2tIquQjd0KushATHfRy%2F2aNPz05j1%2B6SQ7L7AFzOeF5NNbhlyc0tnkLEEjRVQSOiBBSLpC7PkICQP8KXY9mhEDIK6qx90A%3D%3D--rgPpphL5Lc69y%2FZX--QYOSu0awPNly0DahBia70Q%3D%3D","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_chatwoot_session=SxR8yN4BJZUK8sFqZsXdUgLSPeqzvORnawIr9yp7sbUJZBiC%2B9iduPMi4K6ep2QaZ9OCuFSwKIoU1DZPHZany1oKAb9Q0UoC9EkN7kid1j4h1g%2Bt%2BJjiFFq1vdU94ykZS74pDUFOjaixIxCGH4nm%2F%2BKObwTBaNZG7xvpRLQ1SzFkNaoievVD1rc0vE8bsj%2FJLeQg2tIquQjd0KushATHfRy%2F2aNPz05j1%2B6SQ7L7AFzOeF5NNbhlyc0tnkLEEjRVQSOiBBSLpC7PkICQP8KXY9mhEDIK6qx90A%3D%3D--rgPpphL5Lc69y%2FZX--QYOSu0awPNly0DahBia70Q%3D%3D; path=/; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]}],"data":{"size":9376,"size_decoded":10647,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2042)","md5":"c4956391406832747761a6ceaeecb7ef","sha1":"aed01e5384317297fe5827ab54618d855b4c7ef5","sha256":"337abe9d3aec762eec0fdac2257640185fd8d6eb4497df5b24d508089246f3b9","sha512":"ff12b5f0b943385e74b13fa4cb1a669f1feb8bebfe5dacc8ae75b98089ce5a0bc93c256e8008bca395f6c4ffae91cf57f018f1afb148df43748c21005198ae3f","ssdeep":"96:9bj/858XBb29iuREfxbunzcMIv0ZBcH/G/80jjp+bQzszG0+V25IRQe/QtiSNEuC:F7XjFuXs1ffXLJk4+","tlshash":"9612859e55780dae15033e81ce87bf9f18987127ec88e8a1fd8e8b54a3c5b911674878","first_seen":"2026-08-30T02:34:42.330334Z","last_seen":"2026-08-30T02:34:42.330334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/_plugin-vue_export-helper-BPljGQn5.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.930Z","timestamp":1788057241930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/_plugin-vue_export-helper-BPljGQn5.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Fri, 28 Aug 2026 19:12:11 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 28 Aug 2026 18:52:08 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 112910\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: eAavSIUPzo78qdT9Lc9RYmSunql_IxQN2MPMeJ5DqxxVUTtcrx0uDw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":172758,"size_decoded":66362,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28896)","md5":"5912927593f2867274585f806f447f07","sha1":"80f0e94740e7b52dbfdd9cc0ccadaeabf7a94364","sha256":"b7e7fc7e08c1a540f715899547754b02419ba81bb60e5c1d059a2e74d3c057fa","sha512":"95d98ffa167197fa3c5b113f39709c8541b33c79b8265d5e32f86c866b7aae466e39732854ca0b5249be278c5b2e564a88c57da76f4669fe2c9d0857496817ce","ssdeep":"1536:885PUfBQPoO3D8j1ukSupWhEed8/5xnvWXE9uJdo6hMo/h32BbUgWFqLcke/W6:PQ6onNpCs5xviE9uvoCB/h3KFyqnA","tlshash":"d3f318e93081713293e919e250bb1402b2296829384d84e8b57deddf3e7654950fffbe","first_seen":"2026-08-30T02:34:42.33378Z","last_seen":"2026-08-30T02:34:42.33378Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":9,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.941Z","timestamp":1788057238941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzEdfpk3SxOGDO1FOV%2BbXE5UXo%2BwlVc6IT6D%2BJQqWDODoL52oQUXHu2znf6Fg%2BEC%2BklY6NwX0n55z93C6aRvYV7tgOuecOx%2BntjohtLNXbSmTkEfUtccK7wHCVlSZo%2BtXk1WfXeS\"}]}\r\ncf-ray: a33064cf5998b51e-OSL\r\ncontent-length: 11146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":44350,"size_decoded":11907,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31998), with CRLF line terminators","md5":"efc01f2aded8e7b272ab9f9e1b3ecdb0","sha1":"eef21a57c46361f05c28d0d7b97fdc6530185c17","sha256":"668bfb67cff6b815ff9f9b82e070d4ad8721414bca6f3de21f10fb9f3e5dfa32","sha512":"20e04e83be2dbab7ec9972ac31ba5372fa53d62d046220f93e348c47f1840b636d54d8ca380eb36e7f7445123eec24e1d435fb61928eea259ccf912c5c3e8b08","ssdeep":"768:FCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSRc7UuHjRUQuFBt33:MITMFC4dbMVRSRcgRDV","tlshash":"cf137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7d88c213ffbc","first_seen":"2023-03-08T07:37:20Z","last_seen":"2026-08-30T04:54:51.732838Z","times_seen":1025,"resource_available":true,"data":null}},"time_used":910,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":910,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/mobile-app2.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.973Z","timestamp":1788057238973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/mobile-app2.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXbtyY%2FI8YCS6gG7NFTKOh93v4iXhNkDy9HOSxgWLS9K6Cm9ES77a7D4%2FL1oALMHUOVCOOmDecDjudXZR1J3cCNlsZPFmnrT9uxiw7H4O8T5Ye0qoEc%2B0mv7NwmjxJ2BI3FtIiLf\"}]}\r\ncf-ray: a33064cf99abb51e-OSL\r\ncontent-length: 35393\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":35393,"size_decoded":36141,"mime_type":"image/png","magic":"PNG image data, 315 x 507, 8-bit colormap, non-interlaced","md5":"e26bba463d260e078ac8629c81b0880d","sha1":"b1193b6a599af24e147823b8937032c7f58945aa","sha256":"00b9f3ded7bd55a409b41a1d92ee4cd67bf765a665442de53065675ca575e0fa","sha512":"4ed8eccac70c37f73e12010bda61dfed74d842e51c5c660648388ee085dc796e7768117c9049d1e076bfc913331ee2aaa29ae68422816e189a360121c00ce2d1","ssdeep":"768:lyvgW+RPOTm9mw/xJme5brdAK2v1TD6HnZ1CxYBaax+kV4RXXrWS:QKS6/GeJdC21CxYBVSV","tlshash":"bdf2f2c702291c89307d7eebb3e73760252a9a8c5de29de010b383d1ee155a834592e7","first_seen":"2024-08-29T11:46:34Z","last_seen":"2026-08-30T04:54:51.768087Z","times_seen":343,"resource_available":false,"data":null}},"time_used":1007,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":998,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/32/en-us.png","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:34:00.452Z","timestamp":1788057240452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:29:44 GMT","end":"Sat, 21 Nov 2026 04:29:42 GMT"},"fingerprint":{"sha1":"AD:56:9A:7A:0D:59:51:B4:A7:48:82:60:B8:DB:1F:A1:A1:FD:51:F3","sha256":"BD:3C:C8:79:0A:A4:32:CB:65:88:4E:EB:BC:86:AF:40:EE:41:55:58:77:2D:F1:14:A0:79:98:26:E5:1B:17:AF"}}},"request":{"raw":"GET /flags/32/en-us.png HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:34:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 695\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Nov 2022 15:42:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMX70TipWcQwqcPLj1vSk5x9aQnVftf9CmCjeGf9ckOyD7x86q6Dabib3KZrCs6fAjxC292O%2FZwu3ANBLoL4jgEK1rDYmNaNDaVmd%2FoJ1Ek%2Fg%2By33jdn3%2Bqgxf6G6oSNCmY7ag%3D%3D\"}]}\r\netag: \"63692750-33e\"\r\nexpires: Thu, 26 Aug 2027 05:27:17 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(89;u=4;i=?0)\r\ncf-polished: ok, orig_size=830\r\ncf-bgj: imgq:100,h2pri\r\nage: 335203\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a33064d8c8f456cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695,"size_decoded":1514,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0c7d024de9ea604d5112aafc2738f21f","sha1":"19eae4ef8a7275c8cd5a6528e9c302c36feb8ac4","sha256":"529bcccc5a1659f26fe9f396a809996d064504598f145bee5abc62b94f7d1ec6","sha512":"1f2d1c7015d2b000f5b271ead4e16c3f36f049a34991d7032ee3b353ad7b1297bedcb4c75af662aa15d4b86a2f8187557d701abbdc7b32133ae1f23b9042af7f","ssdeep":"","tlshash":"670144c70d10215ccc2bcc5251eb044584a36a6a453b41ff0f2e980c56f595f5cd0305","first_seen":"2024-05-01T05:40:26Z","last_seen":"2026-08-30T06:25:07.385387Z","times_seen":2132,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/Home-BIgP2XQq.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:02.164Z","timestamp":1788057242164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/Home-BIgP2XQq.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Fri, 28 Aug 2026 19:12:35 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 28 Aug 2026 18:52:08 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 112887\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: n_oYXmE8iQdHd3irt10mB8RuiduAft5mQnAHufujx0lASnLPLDFVRA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5765,"size_decoded":3019,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (5722)","md5":"9b019379eda1c26c830f4f4a62deb1e7","sha1":"2ac1633caa4e4217b58f733addd9b83a5168a961","sha256":"6a61ba52476b31583fd4844a2b0f68c1be9e44392d230674c85090f6e2190f23","sha512":"b1e89cb9d2353c45f61a35ff444202f572bda23eb091d53c748ea34cc8912e8d1b269c41d35ce65b32a7742f8944f04d095b9a2c27ddc399a1562bad3c55f678","ssdeep":"96:KN005iNWRLCglkYhsHPowbT7lWTRLKzulT9Bcew+jyxXnpFYdK0c2TrWiTaj:KK05HRrlRsAwbTMTRBjJwkU5U5/W4E","tlshash":"5bc1fad9f4604dbed5a748a5b144244203390f9fdea280f5f8fe642e2748cb8d66b39d","first_seen":"2026-08-30T02:34:42.340549Z","last_seen":"2026-08-30T02:34:42.340549Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://app.chatwoot.com/cable","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:02.194Z","timestamp":1788057242194,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.chatwoot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C6:C8:CC:4F:B9:19:54:D2:08:19:4E:7B:F0:17:6D:EE:13:74:FA:40","sha256":"F4:7C:47:E4:AD:14:81:EC:91:65:5F:6D:FE:68:B2:7D:78:E9:19:CB:8C:74:D7:83:88:4E:D0:DA:06:66:8E:98"}}},"request":{"raw":"GET /cable HTTP/1.1\r\nHost: app.chatwoot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://app.chatwoot.com\r\nSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: YTN5mRoFwi1zzfS7O1A2sg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 30 Aug 2026 02:34:02 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: naTTNnj+0UbdfLm42LZTzDT9q2Q=\r\nSec-WebSocket-Protocol: actioncable-v1-json\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":211,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":96,"send":0,"wait":101,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/api/v1/widget/inbox_members?website_token=M623GeXuD2wcdUy1kgLxWb4q","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:02.205Z","timestamp":1788057242205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.chatwoot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C6:C8:CC:4F:B9:19:54:D2:08:19:4E:7B:F0:17:6D:EE:13:74:FA:40","sha256":"F4:7C:47:E4:AD:14:81:EC:91:65:5F:6D:FE:68:B2:7D:78:E9:19:CB:8C:74:D7:83:88:4E:D0:DA:06:66:8E:98"}}},"request":{"raw":"GET /api/v1/widget/inbox_members?website_token=M623GeXuD2wcdUy1kgLxWb4q HTTP/1.1\r\nHost: app.chatwoot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiJhNWUwNWVjZS1hNjNjLTQ0NzgtYjNiMS05YTRhZjI0YTJjMmIiLCJpbmJveF9pZCI6MTI2MzQxLCJleHAiOjE4MDM2MDkyNDEsImlhdCI6MTc4ODA1NzI0MX0.a3RDUcyEW8uHogQG7yP5mXtFLxpn0cd64bh0cEExaC0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 92\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"43dcab3fa642160801259f4ab3ea7ac6\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 0c294f1c-8e35-44fe-ab9a-17d1f22b5998\r\nx-runtime: 0.013399\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92,"size_decoded":602,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"219f715d29e583afce2b1004e16d5406","sha1":"d641900f5dd074790bc6c9d3f0b1c828e1c74134","sha256":"43dcab3fa642160801259f4ab3ea7ac6f2f0506717ab9f625810b118ee6f7ad3","sha512":"6d2c268d7920ec894d41815c544b90b50d45887baba8fce8878b83a7e8e49d1c7ea1a385f9cd265b4d98059aa0122dbd6ac1127fc67b16d45481245ad04c6063","ssdeep":"","tlshash":"c6b01241523042018e0010549842d68111d168831899d80cc9885f0825405c0e10b607","first_seen":"2026-08-30T02:34:42.343434Z","last_seen":"2026-08-30T02:34:42.343434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/brand-assets/logo_thumbnail.svg","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:02.342Z","timestamp":1788057242342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.chatwoot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C6:C8:CC:4F:B9:19:54:D2:08:19:4E:7B:F0:17:6D:EE:13:74:FA:40","sha256":"F4:7C:47:E4:AD:14:81:EC:91:65:5F:6D:FE:68:B2:7D:78:E9:19:CB:8C:74:D7:83:88:4E:D0:DA:06:66:8E:98"}}},"request":{"raw":"GET /brand-assets/logo_thumbnail.svg HTTP/1.1\r\nHost: app.chatwoot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:34:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 709\r\nlast-modified: Mon, 21 Jul 2025 13:17:12 GMT\r\ncache-control: public, max-age=31556952\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":709,"size_decoded":918,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dcc8f7564457dc2289261b38e97e72d5","sha1":"d53812c00f866a6b0434fb3722af89dc56500446","sha256":"a2bf806ba82e80de3dffa2a125b305c8df1532579b0ed0c791bce94a904eac2a","sha512":"a1b027b769a5278714b74faf7df90dee883815d0d91932649598160180594b4480c1614535b33b3434b4ac4f486834140a6c398ffa74e09da1f87db1fbdd6cde","ssdeep":"","tlshash":"3b017bdaf578d5c4d518c714126430559e15a8bb434b0110f54c7d6f3b4c9e69af32ec","first_seen":"2025-04-07T19:58:44.118102Z","last_seen":"2026-08-30T02:34:42.346576Z","times_seen":1478,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/invoicing-image/2.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.964Z","timestamp":1788057238964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/2.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p7WVla5%2FyhcBcaBFMi2sjLdzAVy1dQjTkqqV%2BCF4nkaLrsYDYOIjUbFlTpB%2FCV67C3Hr4mGOkbDlm8dXHWhQlU7DgszbC8UMoGULA2wFoPQ2PhZf9NTOYRH61WXSeF6Zk1e%2BKNLa\"}]}\r\ncf-ray: a33064cf89a3b51e-OSL\r\ncontent-length: 8398\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8398,"size_decoded":9147,"mime_type":"image/png","magic":"PNG image data, 259 x 239, 8-bit colormap, non-interlaced","md5":"a4895cbd0983fabb03a129eab4b30405","sha1":"1e8179843b8666448f2c7fd1c640693eb1f0c0fa","sha256":"6951f5ddaff6906a34ea3d6ef126e2a4af0d668b2c4904f26146248349da0cb2","sha512":"4cd7650f694e5b977f44c35f919a3b8bac1b4bf7ad41b3199881913a2ed23712fdfdbb34c3f4d8c2dd4dc60cd2b4c8c0537d9f41b0a11cbe6030d2078b2f722c","ssdeep":"192:tpwi7UClIdQwUTCxtwyOAlydbVevkJtSM3t8Sci:zX1CQwYdwk3SMPci","tlshash":"9102c086de3d51536dccbe65493083413c3a170ed659ba58bb23b13c6df812e82867c0","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.778329Z","times_seen":571,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":868,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/api/v1/widget/messages?website_token=M623GeXuD2wcdUy1kgLxWb4q","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:02.198Z","timestamp":1788057242198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.chatwoot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C6:C8:CC:4F:B9:19:54:D2:08:19:4E:7B:F0:17:6D:EE:13:74:FA:40","sha256":"F4:7C:47:E4:AD:14:81:EC:91:65:5F:6D:FE:68:B2:7D:78:E9:19:CB:8C:74:D7:83:88:4E:D0:DA:06:66:8E:98"}}},"request":{"raw":"GET /api/v1/widget/messages?website_token=M623GeXuD2wcdUy1kgLxWb4q HTTP/1.1\r\nHost: app.chatwoot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiJhNWUwNWVjZS1hNjNjLTQ0NzgtYjNiMS05YTRhZjI0YTJjMmIiLCJpbmJveF9pZCI6MTI2MzQxLCJleHAiOjE4MDM2MDkyNDEsImlhdCI6MTc4ODA1NzI0MX0.a3RDUcyEW8uHogQG7yP5mXtFLxpn0cd64bh0cEExaC0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 14\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"258153158e38e3291e3d48162225fcdb\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 3fb79e06-d0bf-485f-9ad8-2f7e87404c1c\r\nx-runtime: 0.013429\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14,"size_decoded":524,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"af1fd6795b95d5be36b37d5281fdcdc3","sha1":"1bb3365ca69f2475ce5d789503180db7256dcbb6","sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","sha512":"284ea516df7e3636fb847431b6d91444a5987913985a01228395a2858954d7e654d86f099c20345e76e3a830bd3004eb19dcd4cb75a1e8f442168cb0e16103fd","ssdeep":"","tlshash":"2a6000000300c3000c0000c0c0c0cc0003c33003fcf0003c03000000c300cc03c00f00","first_seen":"2023-05-21T09:16:00Z","last_seen":"2026-08-30T02:34:42.349186Z","times_seen":2710,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.925Z","timestamp":1788057238925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 01 Sep 2026 02:33:58 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LmEcu0vdJx%2BGZ2jbXzL8IKWxNvLV8EVdKAQfc%2Bh6L22cDyAhyTs0AZTyNi134VplioQs%2F04NPVCOEZszu0Hb6qJxT0Z2q%2BKQaXdYGvC5KuPa0AuM9RcRoCroChQYhF1aLQTOhXpE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 30 Aug 2026 02:33:58 GMT\r\nserver: cloudflare\r\ncf-ray: a33064cf4990b51e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-30T07:23:06.013402Z","times_seen":427795,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/jquery.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.927Z","timestamp":1788057238927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.min.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vm%2BqAbKjWe5FKAsmEvyYs%2BZuDqQx%2BNqKTNyMhZnxbfIwDXUakmYGv3iqWac61T28rAN8OaAlrWSRUi4ItfUURgZFEsx5HHTmMXkU3YIiT4QFeN9%2FetH%2FXfLMjHngP58TmGtsmQe%2B\"}]}\r\ncf-ray: a33064cf4991b51e-OSL\r\ncontent-length: 30260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":31019,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-08-30T06:28:19.846018Z","times_seen":11194,"resource_available":true,"data":null}},"time_used":989,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":978,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/meanmenu.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.931Z","timestamp":1788057238931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/meanmenu.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=okzSL80UyvuYC3dejIPjejrbZ0djLkqIQjfCrSfr8qjwRNMBEKSNaqs60UIU6qZA8WI79Tqv1KtDD6FQkoi2j461M4sIhNKJ3Uv%2Fcn1uz4cqb4em%2BNj61XyWPpDlIC0fS%2FHlr7yC\"}]}\r\ncf-ray: a33064cf4993b51e-OSL\r\ncontent-length: 1476\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6035,"size_decoded":2228,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (397), with CRLF line terminators","md5":"f92bd7e01c33f6a2bd73c5a2833b4874","sha1":"39533bc5c1e8128008023565e03830e00ce17808","sha256":"0927e12f94a642d9bbf07b4204102848162eeecadc02d002ace6fe334315b832","sha512":"e8a7d2768621e01fdf3e45eb187437f7c452f6fafd1d0a48add3844c7d16858ebadaa17f7b7272625f99b8a3f1f4426fab861d62cf1c0656bcca6617a12b344b","ssdeep":"96:cqHVT5bG+ESTXybNrNnaToz99MClbxXvY+CSoGZn7c6BFSEXT:zVT519XyJnl1BCSlZnl9XT","tlshash":"bfc1dd2bb5b044f8a0bb7a61b97af230f4f3660bf146d50131bd64262f31d6015a2fe9","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.770277Z","times_seen":619,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/main.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.948Z","timestamp":1788057238948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/main.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Zdp5k7%2FlQ1NVrSCeg4MeXjPfOsdQATGr3ZwlPBoKnD8WMVx757GORihJMvEQw6sK0x1xyiPEtnuqUGIm%2BbmM%2BR%2BcnmFm8SUoBoHfJNgu2De9Yh1fy5L4oEvZ2iNqdiRyjhfv1tN\"}]}\r\ncf-ray: a33064cf699db51e-OSL\r\ncontent-length: 1962\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5916,"size_decoded":2716,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"47bc986391ae43304be7544164cf022d","sha1":"e42afdb45a95bee3a021a79a24bb0357f84b62b8","sha256":"f7f7c12c779f4100a67c0a9c853a1f4a534183c36746df58d358bb5d02e548f8","sha512":"95d746af3aa95c33c01f8ad9e80ba17b7390bae9c4df4c0d2d85762bb84ac18604bfe07eab20d2106486a7a1b26e83c621d84b1d3b7fa0a064ce6d94be6f483b","ssdeep":"96:705I1XuiMlvMsW638DBpUtr+LIZDu7dQzqvcr8r:705I1Xx0tuIZDTA","tlshash":"15c17344714c143dc5fb32a4d139d5098f7d6111e203b2f5f8fe00ac1b686aeb6ba99e","first_seen":"2024-08-29T17:20:29.828451Z","last_seen":"2026-08-30T04:54:51.771254Z","times_seen":337,"resource_available":true,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/utils.esm-qHqIGgqd.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.932Z","timestamp":1788057241932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/utils.esm-qHqIGgqd.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Mon, 17 Aug 2026 13:51:26 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 17 Aug 2026 13:32:17 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 1082555\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: 1ABtZl5U9TqyKyPyMayl_AptoB2e_zVTRdcjwLEP_JCCFQN0LlSxmA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":85439,"size_decoded":27470,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33395)","md5":"3efb84c8441810ceeded70f3c74decdc","sha1":"5c74be20850da2cb8fab68a4acb188da6e2d0cee","sha256":"88c1088ef412028b21ac991820d2a4b43b9e53addae291a5a25f805240c2535c","sha512":"d3fd14707b29b6bdeaf6b1a7c98b0d53f2a1a9098237a29c514cfa7e474c5e31bdf59e6eabe83c631480f0d68c1f9d0a0091d1a096ef4ea9a86512646fca80cb","ssdeep":"1536:vsvrgLVpQTsYfnsNccuLticPAbPAZPApfijNp+gc515Ec5T:vsvrgpQTg+ZL9AjAZA1ijY","tlshash":"8b831ac67191e1ad03b920a094b7030db2fc5948acc9d89de5b9dcda3a64c4971e3bdf","first_seen":"2026-08-19T00:04:38.3938Z","last_seen":"2026-08-30T02:34:42.361256Z","times_seen":10,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/sharedFrameEvents-Cz3L815q.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.937Z","timestamp":1788057241937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/sharedFrameEvents-Cz3L815q.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 944\r\naccess-control-allow-origin: *\r\ndate: Mon, 24 Aug 2026 10:55:51 GMT\r\ncache-control: public, max-age=31556952\r\nlast-modified: Mon, 24 Aug 2026 10:31:55 GMT\r\nx-cache: Hit from cloudfront\r\nage: 488290\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: -WOzJCKnZ79Q2TjNtP8byUiYTcRWwm6U3X4DAnMxXADvd5RTqiHobg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":944,"size_decoded":1440,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (888)","md5":"0a8fbdea1006d3d61326962657a95691","sha1":"8602a805af1e4fc30400f17cf7cb12c041a0aa04","sha256":"7a326974c78e334b8e696ec7f4a20334e91143e9825b069d9ef86724eb6b0ba1","sha512":"02cae5276bf980a40ad9aff0adfc9dc435538ef975f785a66bb589531d1288735b22ac0db5662ed2c152235013235f7f6f283b88091f9f36ca9ad18ebf862031","ssdeep":"","tlshash":"ff11e18cdc7790b741e308cb13a05b256228155272bf4cf078799c3d1719e9f02cee08","first_seen":"2026-06-03T12:29:30.762728Z","last_seen":"2026-08-30T02:34:42.362809Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/Icon-CSIDAZny.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.943Z","timestamp":1788057241943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/Icon-CSIDAZny.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Fri, 28 Aug 2026 19:11:48 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 28 Aug 2026 18:52:08 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 112933\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: knkiwHS172bjlo5nJkCxAwzzSuis5_H8UlT_X4YwZKyhAxuGCgxPLA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5940,"size_decoded":2696,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5895)","md5":"395db3fabb84e060beb9799c1022e59a","sha1":"ee660b069b33ba2f021ae7d2aa25a5086bc0eb19","sha256":"ecbab327211776ac5ad0f460f2f78faa0f8b084c2a43df56a404f6658d1c42f8","sha512":"8187c3bbfbcf1e8aed315e77e0809680bbc8b5e0ccc22a5127e092aa57ffa6220ecf2ccd87dceab9826c7f714784e2ed744acfa0e2ad28171eb13130b03c6a2c","ssdeep":"96:ItXkA6rrv+QsrRelEQfiWyQVCANUIIBbVLclT6M97AMN/T635SR93UE47TTPxx9i:sAv+QiRiEQKWJNUZw7/T63S3U36C72","tlshash":"e0c10b18c0e26dde8d36f774ec8207b068d81d54a54d48abf3b5b92453af824693af34","first_seen":"2026-08-30T02:34:42.36679Z","last_seen":"2026-08-30T02:34:42.36679Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/HTMLSanitizer-cciupgGC.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.948Z","timestamp":1788057241948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/HTMLSanitizer-cciupgGC.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 166\r\naccess-control-allow-origin: *\r\ndate: Sat, 25 Jul 2026 20:08:39 GMT\r\ncache-control: public, max-age=31556952\r\nlast-modified: Sat, 25 Jul 2026 00:37:52 GMT\r\nx-cache: Hit from cloudfront\r\nage: 3047122\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: HE_ikzqYecOyRVFCmw2OuHj4Okr-Or7fHIAw6HOb14GcePg8MvEozA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":166,"size_decoded":663,"mime_type":"text/javascript","magic":"ASCII text","md5":"cac11eabec2b2c83d26ce54c6289166d","sha1":"2eaeab7478d9ef3371bfe81b702812fd72ac5be5","sha256":"072bfecac317b389de291b144c230c15ed44ab7b1cd56b16956981d09216d86e","sha512":"bb7b835a4195c4cc3c6570df57fd919e0f4211f71f6e84232be1442a6ce97be451d96ca81c33f8bf043475de4b4bb34fa04ba651542f4ff07a35ce88b39f0055","ssdeep":"","tlshash":"6fc08c2a9ca0abb3ec23889ec628fa84a90462e8702341bc05188996807ec505a30a55","first_seen":"2026-05-20T05:52:32.849311Z","last_seen":"2026-08-30T02:34:42.370469Z","times_seen":221,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/odometer.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.939Z","timestamp":1788057238939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/odometer.min.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6QKVvBn1gpPso7ZHQ0dPYSYovK7PGrqX5bheqwtZtjYvz%2F8ySl2e7MLZ73TEiyS9abwISo9c3dEFPgYxqDr0hugWfmFnKXC6SJFhePZGOdzHTDApIylSbKUYg717xBAObIynZHP\"}]}\r\ncf-ray: a33064cf5997b51e-OSL\r\ncontent-length: 3453\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10264,"size_decoded":4201,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10241), with CRLF line terminators","md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-08-30T06:28:56.79227Z","times_seen":3538,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/invoicing-image/main-pic.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.968Z","timestamp":1788057238968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/main-pic.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqL32fZa9gwAFpYZFsUvu11lqvUmN4jz4Sf53yD8FSXICqNHF9SqXCJwdiUfCJ6UAYMkoPIhvDpqHzJ5wDNWMswRZS1qiDvjwgofVf8fBH8%2FH2OXzovt22YB26%2F5g7j2qJMkTtwq\"}]}\r\ncf-ray: a33064cf89a6b51e-OSL\r\ncontent-length: 43385\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":43385,"size_decoded":44131,"mime_type":"image/png","magic":"PNG image data, 759 x 448, 8-bit colormap, non-interlaced","md5":"b506da360c46df01896073b735a5cfd4","sha1":"7ecf08e945d651a426001226de42030a59ddf94b","sha256":"4d70e9862aff6ac84d0732146c9afc39bc4f9f6f4226fe11541e326f1ca51852","sha512":"d66654b11ff53a0d35b0313877443b8acd02cb1649ec4edc694913c334aa4901d257899d616bd6b834bff3c0c97a10c074f66701f0dc362499b8cfaea9a08b24","ssdeep":"768:llcZk/3MZthb8PY9aOKX4pIdQfKE6riKWtG8eYPXFTQLkH21vKSCmKnlTXq:vcZLthb8KaLo47HrjWw8XeIKKSCblbq","tlshash":"5613f1fe387438f8de51f0f1db320835b48a1df07aa1a77849ad7985b22d5618ee2057","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.752645Z","times_seen":558,"resource_available":false,"data":null}},"time_used":1084,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":918,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/map.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.971Z","timestamp":1788057238971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/map.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pMXvwerXBFdVcHm2IxDrC5vKgxmjdZtvxqqnmp1SJmL8JHngz%2BD6tYi1Wqu0OLrKP2iPrreUuWugu8l2gN4%2F5U1euoU98Z7xvfGa%2FQXqo6Cyd2Tzs%2B%2BiyVs9xDS3PGx3wx%2B1G%2B6j\"}]}\r\ncf-ray: a33064cf89a9b51e-OSL\r\ncontent-length: 26716\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":26716,"size_decoded":27472,"mime_type":"image/png","magic":"PNG image data, 910 x 443, 4-bit colormap, non-interlaced","md5":"84d3bcdd189d01880e685656aede0412","sha1":"22a1f1efc40b1ee1ff616e9da1d9a0e3efec8263","sha256":"ada5be5a95130a3615d8bbbc3ffb593c68cc36d50ae335d567b71ae95a6dbfea","sha512":"366c88a7add9a6c914aae9940b1ba1747949694da7193058c7efc741225bf498a67db626c7cd9793958031d737cc485fbe69ee6785961fbcccdef90b745d8070","ssdeep":"768:h9C/LmjrGCEQspqrxVnW2/MQd9dC37wTt:h9yYGP/pqzMsm3kTt","tlshash":"2ac2e1ad0c435ef6abf126ab03f3f3b5260a320a1264de955632d4747c8017df6a7854","first_seen":"2023-05-10T09:37:00Z","last_seen":"2026-08-30T04:54:51.772208Z","times_seen":342,"resource_available":false,"data":null}},"time_used":1077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/api/v1/widget/conversations?website_token=M623GeXuD2wcdUy1kgLxWb4q","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:02.175Z","timestamp":1788057242175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.chatwoot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C6:C8:CC:4F:B9:19:54:D2:08:19:4E:7B:F0:17:6D:EE:13:74:FA:40","sha256":"F4:7C:47:E4:AD:14:81:EC:91:65:5F:6D:FE:68:B2:7D:78:E9:19:CB:8C:74:D7:83:88:4E:D0:DA:06:66:8E:98"}}},"request":{"raw":"GET /api/v1/widget/conversations?website_token=M623GeXuD2wcdUy1kgLxWb4q HTTP/1.1\r\nHost: app.chatwoot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiJhNWUwNWVjZS1hNjNjLTQ0NzgtYjNiMS05YTRhZjI0YTJjMmIiLCJpbmJveF9pZCI6MTI2MzQxLCJleHAiOjE4MDM2MDkyNDEsImlhdCI6MTc4ODA1NzI0MX0.a3RDUcyEW8uHogQG7yP5mXtFLxpn0cd64bh0cEExaC0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"44136fa355b3678a1146ad16f7e8649e\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 4cee8b05-7ae5-4891-8ef2-43bd697f2028\r\nx-runtime: 0.013194\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":511,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-30T07:23:53.329953Z","times_seen":768115,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T02:33:56.547Z","timestamp":1788057236547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7mbLh7OecTnS4srwuQUkkHg6MxRye694NmxG%2FFOsk67SendqXcUaLYghSUTm5Jtbtcl7xzd8yN9qDKpt%2B7FBN2cysUK9x8oSqeI7noX76kyRKR4CLSJpprJAlWq6kfsyniA74pE\"}]}\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; expires=Sun, 30-Aug-2026 02:48:58 GMT; Max-Age=900; path=/; samesite=lax; secure\norivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D; path=/; httponly; samesite=lax; secure\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33064c09959b51e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-08-30T02:48:58Z","raw_expires":"Sun, 30-Aug-2026 02:48:58 GMT","max_age":900,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; expires=Sun, 30-Aug-2026 02:48:58 GMT; Max-Age=900; path=/; samesite=lax; secure"},{"name":"orivstrongholds_session","value":"eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D; path=/; httponly; samesite=lax; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106315,"size_decoded":18546,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (379), with CRLF line terminators","md5":"c88cc74f6990215aa84682251031e0ab","sha1":"7b7462842ef52383e605acaed71121cf37f8eec5","sha256":"b4c95e9b9c8c941531a59a512214b2667555255591c953d0c99160c8097ac269","sha512":"57ab74d8e46de442b55735b46f78571855ba54b04c56771c0daa622ca992645a4185146d5be31dbb69d8581a5a53dfc61ffb399685dbc79393a0311654c733cd","ssdeep":"1536:3fFepPMFEPX63cftjJ4SDlbKrhFm7Ep/5GVQqePzAT/FhTZmh1:3k0wrYn","tlshash":"e7a3761541c0120551b3d290fe629b49ff748107c34b857c76ee3aa36fbe9688a37be9","first_seen":"2026-08-30T02:34:42.381899Z","last_seen":"2026-08-30T02:34:42.381899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1928,"timings":{"blocked":-1,"dns":8,"connect":18,"send":0,"wait":1899,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/dark-style.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.711Z","timestamp":1788057238711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/dark-style.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nr12N1yaiZF9Hb%2BTA6qEJHdXi1Kjij%2BYlItHIE1F%2B%2BdINKSs%2Fv2ZpOmxJ2M1zCXaERcOspRf6mbQnB5d%2BAk2q81P3Zv3TaGSIQFh2NsKGB4gGs589nnbC0ZymIbUysm5bd9s7zs5\"}]}\r\ncf-ray: a33064cde98db51e-OSL\r\ncontent-length: 2558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38764,"size_decoded":3358,"mime_type":"text/css","magic":"ASCII text, with very long lines (1191)","md5":"8c1ac4fa64c95a86f75e12ed2d732159","sha1":"7ebcbde56a39fae94bb808f1fdae5c0fa6348539","sha256":"193fd9dfc7b3b076646a4efbf74285486c93cc56f7b1f48ab083ff11400ecee6","sha512":"c3931898c92663a481cb0dc0fa8f2386288bcdd96ce0fb96198c872a64c7c9baf576efe6594b2510c2a2a6fcfe2c4b08c50c09fa24c1e7de50d3767447643a81","ssdeep":"768:JHYmOwoL86Kn4GurcaqHYmOL86Kn4GurcaqI0oUIvkxvXpBANLbERP3gtr7kxvX7:JHYmOwoL86Kn4GurcaqHYmOL86Kn4GuU","tlshash":"0e03168599fbad5015d3041c79c8ce601ffa62d0572cf3bf793781acaa8660c12baf59","first_seen":"2025-03-07T12:16:50.258205Z","last_seen":"2026-08-30T04:54:42.429658Z","times_seen":326,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.921Z","timestamp":1788057238921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OF2I0z6hYBunedCtftFgMAq3Zwn8X5iMLTpGWvENZTLQDYRn9itkmWSzr9vU4fVonf%2BZL1XpIdDkfvsFKZfIZHhCEUFfetW9LzlUA1ug9%2BZAt3r%2B8AawZ8WmmKl9KuCTFaGOBTP\"}]}\r\ncache-control: no-cache, private\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33064cf398fb51e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4003,"size_decoded":2487,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"aed06967e631c1cd12e84295e9224928","sha1":"015f9206af280fb11e7a96c907df03dd5f928907","sha256":"91f5b84f392e6d07e449af67427651d311c42401c9370f14a879545d13f72cfc","sha512":"e458bce571540a49664e6fbb0ebf76a024c73be5b92044e8b5ef1685e39c13363bad6ad2c66b8160bd6b9965ba5a553ea3e4024800b12e70d65abc33967dc2f8","ssdeep":"","tlshash":"7d81a7e16f5e99bb031206ab6014737afcaf1c39f526dddbf5b70013a7c44854a712a0","first_seen":"2026-08-30T02:34:42.265154Z","last_seen":"2026-08-30T02:34:42.265154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/invoicing-image/1.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.963Z","timestamp":1788057238963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/1.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qWduR7RQsDint1%2FuySgAY33PfDFOLRBC17W7gcHFdbgcVSlnOqLExk%2F49C0ZlbHA%2BguhbghXzwT5s13JZQGglpz18q%2FoslZ2jKSnGvBdAJO2Z1wlhh4i1kTtECQAn9hLKQ3U%2BRaB\"}]}\r\ncf-ray: a33064cf89a2b51e-OSL\r\ncontent-length: 25043\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":25043,"size_decoded":25795,"mime_type":"image/png","magic":"PNG image data, 682 x 448, 8-bit colormap, non-interlaced","md5":"c393722b7042005b24b5124981fa52fb","sha1":"c4faa75b0358dc94de84fe1e152c1100a15794c1","sha256":"a2592be1c2009912e7b17b4d1a5022ded8c2237ec22d9fc381d307098808af9e","sha512":"1c62546d8d8bdfb9035ca3e8758e2c382dfdba79a7aad75775abd5a126d369f5943a07e72adb8738f6676986a388ae4add17e6c44104a795c28ae820cad5a808","ssdeep":"384:xmvay2u7wM9bFIPgNkV4BIzKqKRHArznOOC2sZ8K1uteVC4mN:xm/rUkkaB4zlf+CK1uJ4A","tlshash":"3eb2e16f8a62861cfad54caf103db256e4f4ed292cd4e42fa92d5445e3f62b080627d4","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.761123Z","times_seen":558,"resource_available":false,"data":null}},"time_used":951,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":942,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/invoicing-image/circle1.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.969Z","timestamp":1788057238969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/circle1.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rs76KG6TFNdBYEYjBGn7E6ROgJVarOhHcKQ1HI0tscETCbRX3oyqDV4Yty8aW95ECNwxab0G%2FOC9pDTCS1uVot0clRF5nsjsFXiVWJHM0Iyx%2Fn6du6EJAqTjxRy2g0JgHGU%2Fr6q3\"}]}\r\ncf-ray: a33064cf89a7b51e-OSL\r\ncontent-length: 1868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1868,"size_decoded":2615,"mime_type":"image/png","magic":"PNG image data, 180 x 181, 8-bit colormap, non-interlaced","md5":"3dc7e9a6a12a32389eabe691980a5039","sha1":"755848207b7f9149b3c9959dfbdae59c2486a9f0","sha256":"c4be331bc355e304e8227874a23bce8eb923d34031d32649a364863fa49ac5f5","sha512":"9d1736bf5f51e3689e2f0d9bcdbaeee71b8051484832562ac7951a2a2511814e632669888508123416c2b3780d10d156b32038b5d59b2a75b866396b8a517db3","ssdeep":"","tlshash":"fa3108fbbb2cbfc19f700aa742909a94c1f0030827b0612b89b742f0a5e9af41167d15","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.746447Z","times_seen":562,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":792,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/slick.min.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.700Z","timestamp":1788057238700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/slick.min.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4r6%2B1aXb0JLVVoBd7vy6TzPzP2E55IYKhKzJGnPnaGTld%2FDqCU4kk9b6UR7YILxLBKLOdF6iAP8qJq0CRuhZ7r2OQyoQe%2BMXrAlasudNTM2KAwhTp01BFriRSzyEq8zIshrS4y%2B\"}]}\r\ncf-ray: a33064cdd986b51e-OSL\r\ncontent-length: 726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1814,"size_decoded":1521,"mime_type":"text/css","magic":"ASCII text, with very long lines (1332), with CRLF line terminators","md5":"e1bb8aca0ada1361d15eac06412538b4","sha1":"51f8be05d8b482766bbe8550181ee66b95a1a10f","sha256":"6c3b07b65a2bae0d0b8430524dbcffac75c20125514b04dbe5ebb48faca4df64","sha512":"9a1120caca16be2f5e6bd422a569e1042b81948f15a36d85fa41508773ff93f938deb8594d1d02b922cf4292378e8a06255a3c3b3b36cbb8683a83154ca9a079","ssdeep":"","tlshash":"8a31eb990056118a4037e7136ae3eb8a39e7f1125c3206c9f75c8715cf8feda1dc25da","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.743417Z","times_seen":710,"resource_available":false,"data":null}},"time_used":993,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":993,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/form-validator.min.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.946Z","timestamp":1788057238946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/form-validator.min.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjhZGXbMKi%2BxVRh7WMIJFOeyNQgfW%2F048Q%2F2n3oSQCm%2BpPqawrgcpSFqMKRG4bId1c78J0b%2B6wiqsbRVW2WlqVe0XY9928i0H%2Bi96CLox%2F2qfm3CFEwQSFM1gMndIv2i27WUenD4\"}]}\r\ncf-ray: a33064cf699bb51e-OSL\r\ncontent-length: 1913\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6063,"size_decoded":2673,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5862), with CRLF line terminators","md5":"a5cae60d0a59205f9c82928fb16ca1a6","sha1":"c03a6517da694e1ba5aa6b9dc6a647bd119b819a","sha256":"60c23945490cba413f3d6cf2cc57d5c560faeb0cf68ab38daedc80939966b108","sha512":"c43f6e446c89df6fc82c5cecd3b5727bcc226c2826f9ec8e0ac88925ade0bffc212d92759b6c8117d31fa6b032feffe91cb2519318320a16bca2e07d9cd29043","ssdeep":"96:H1MWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:H1MW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c4c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","first_seen":"2023-03-08T00:47:54Z","last_seen":"2026-08-30T06:28:19.701327Z","times_seen":1087,"resource_available":true,"data":null}},"time_used":895,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":895,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/circle.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.962Z","timestamp":1788057238962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/circle.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NzbqWuOUc7fsYMFuelQovF9J5EV%2BNwY4MGxl3p%2BxZF11vEPGufjQDzNovS6a93zPf5Q8bF%2Fhx46ua3Jf%2FmqSRCMUpwOEFPQCTQ3bWu%2F%2FVbrHZWKVK0Duo7nWiOKqeXguaLG2XBvc\"}]}\r\ncf-ray: a33064cf79a1b51e-OSL\r\ncontent-length: 20034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20034,"size_decoded":20788,"mime_type":"image/png","magic":"PNG image data, 524 x 518, 8-bit/color RGBA, non-interlaced","md5":"8e2818145ab7c6ee51794f7dd8b04571","sha1":"8ebb84901bfd3f14211b294bb7667d655204ec14","sha256":"0b76fd0f9811d84c01404d74bb7097e9b908a06af22c37cc6e2973af4170760e","sha512":"3835d6a00544133a076cfbfdb93fae45413d32f26153ad260f5ac0b57d98d6e67bfc336a7b189710df639d366211933bad4b9a61d2cc024e1c421c79711fd834","ssdeep":"384:rUuqhYKe9wW7tacqD3dvFfBoXeQMAXdemlISxgNuyca:rUuquLacqRjoXeGekIegrv","tlshash":"3292d0aee5bc5f2bc7a4fb77b461a81848311b0c53167d71d93abae049db39c4185ec0","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.729203Z","times_seen":575,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1015,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/fonts/fa-solid-900.woff2","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:59.758Z","timestamp":1788057239758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/temp/custom/assets/css/fontawesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:34:00 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:34:00 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9zWJChoyfvhz2mVEDYByu%2FNg3zVD6wNHF7OfljOOKZlqCaXjyXZ%2FqtdDJud1RMqwUs%2F1QcMleN7xFMSqcOh0iYNGHh6YQD%2B0PG0JYk9nYoZKxsdTU7Fqj9aRSTn4T9wj4t9RsoD\"}]}\r\ncf-ray: a33064d479cbb51e-OSL\r\ncontent-length: 126828\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":126828,"size_decoded":127583,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 126828, version 768.256","md5":"297973a488f688271dd223d542ba2697","sha1":"ed99d812e4c88826335f93acede3fad85c90fb54","sha256":"1b099f88c06ed0869872561c157f0ec9cbe133a0939d9ece4ee1e1f54bd4683d","sha512":"83c802972d9fee9dd7e3c0de42d8636c504e65ff20e43406bb446cc95a16acaa21789a03f0e2006148abfe47100bbd0c66aa4cf98f11e9b0220f1dcdb5204f46","ssdeep":"3072:caEaIjBfXHk79vCMuMZhQqmiutWxJfU52qiAx+SMfd:caEaIf3kxa5aaVMaHAScd","tlshash":"9dc3120ef3299411c6f0af104c63d6d627617389ffd548c767993e768aac9e70c28ea0","first_seen":"2023-04-10T14:50:44Z","last_seen":"2026-08-30T06:40:07.512808Z","times_seen":11486,"resource_available":false,"data":null}},"time_used":1229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":891,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/crimsontext/v19/wlppgwHKFkZgtmSR3NB0oRJX1C1GDNNQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:59.805Z","timestamp":1788057239805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/crimsontext/v19/wlppgwHKFkZgtmSR3NB0oRJX1C1GDNNQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://orivstrongholds.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25540\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:40:43 GMT\r\nexpires: Fri, 27 Aug 2027 10:40:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 229996\r\nlast-modified: Tue, 24 May 2022 18:29:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25540,"size_decoded":26353,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25540, version 1.0","md5":"19ab149056827f64d640fa3d65f4e536","sha1":"754c09533c5b386067e762ae85f39c345ec10915","sha256":"60b9b9640fc716abd752df41f38ad81052f4905e42be2ff3c1f78e851863aee0","sha512":"e382cfcf784ef72503ccd007642f5b3e285de7b5515cd76457855896034b7ee26908a1f491527b9fe7a603a6627fb3db0fc9618cdbd52724b8f4d309f7de33d1","ssdeep":"768:whjhD1rmXBpEcXoaazQAU5L9lg+Atku/N4XyJVa:kFOvEcXNa0A6c3tk47a","tlshash":"08b2f18a2721ef2cc94dc5a65b0b056fe58afe6e44d15cde481fb3aa430430ec2afd54","first_seen":"2023-05-01T23:05:16Z","last_seen":"2026-08-30T04:54:51.757387Z","times_seen":2254,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/useBranding-CMvfvrTO.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.933Z","timestamp":1788057241933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/useBranding-CMvfvrTO.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Fri, 28 Aug 2026 19:12:01 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 28 Aug 2026 18:52:08 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 112920\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: n4aQ_e8RVoAtyc548o88lSBk6rwpiH4x5inO9PV4N7RC1PkE0CZFqw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":92152,"size_decoded":31596,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27906)","md5":"44daaf9387021ded4864e46f286ed441","sha1":"ad071f2647551984bfe66457709437a467bb87ea","sha256":"a2a3960bdc2bf8448509063af3d54ef1bb157453f8abd319b2a319c065ace7a4","sha512":"bdfc6253e281838ed330355b7f1e2d99e1e44fa4405a5eb3a541a9d486c0a42558b2378bca12b8a987b3231e5e34c03118fb00b855318f749140a4b157d7fbcd","ssdeep":"1536:pE+cVig0L2XmsHLISZY3BEBXlmJryrIGb/U2XIRGllf3JDECz5tfJswvjYlTpFYV:pFHL22sHLDZY3BWcJWzbB6Gllf5ECDJh","tlshash":"d79309d970d77023877666ea60bb000ab73d2a58744d9894f1ade5cb3e72c1d42b7f28","first_seen":"2026-08-30T02:34:42.391122Z","last_seen":"2026-08-30T02:34:42.391122Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":7,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/api/v1/widget/contact?website_token=M623GeXuD2wcdUy1kgLxWb4q","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:02.206Z","timestamp":1788057242206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.chatwoot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C6:C8:CC:4F:B9:19:54:D2:08:19:4E:7B:F0:17:6D:EE:13:74:FA:40","sha256":"F4:7C:47:E4:AD:14:81:EC:91:65:5F:6D:FE:68:B2:7D:78:E9:19:CB:8C:74:D7:83:88:4E:D0:DA:06:66:8E:98"}}},"request":{"raw":"GET /api/v1/widget/contact?website_token=M623GeXuD2wcdUy1kgLxWb4q HTTP/1.1\r\nHost: app.chatwoot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiJhNWUwNWVjZS1hNjNjLTQ0NzgtYjNiMS05YTRhZjI0YTJjMmIiLCJpbmJveF9pZCI6MTI2MzQxLCJleHAiOjE4MDM2MDkyNDEsImlhdCI6MTc4ODA1NzI0MX0.a3RDUcyEW8uHogQG7yP5mXtFLxpn0cd64bh0cEExaC0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 94\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"62515a00a99ca88aef46f419f8ce7866\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 42bc04ac-f118-4597-8e89-24cb74c70b45\r\nx-runtime: 0.010681\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94,"size_decoded":604,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"424fa82daa89ea3630de5ccd500e608e","sha1":"81ef36d6f02947f25407901199e9eec987902048","sha256":"62515a00a99ca88aef46f419f8ce7866ffe52a67dea8b685c577dec7d166803f","sha512":"db85c2f0e2baad82da79c497a7002e3718c6f078d0d8682046a6eaacf8efd85f661efc12772d086f1e251f1e3f174348487e62eb71c975b8a829d927f7d0d8fb","ssdeep":"","tlshash":"e7b012089f28115c55001a04e2c020012308105377083d48a9001a2a51d38e325300a3","first_seen":"2026-08-30T02:34:42.39301Z","last_seen":"2026-08-30T02:34:42.39301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chatwoot.com/hc/orivstrongholds/en/articles.json?page=1\u0026sort=views\u0026status=1\u0026per_page=6","fqdn":"app.chatwoot.com","domain":"chatwoot.com","tld":"com"},"ip":{"addr":"44.217.160.156","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:02.339Z","timestamp":1788057242339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.chatwoot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C6:C8:CC:4F:B9:19:54:D2:08:19:4E:7B:F0:17:6D:EE:13:74:FA:40","sha256":"F4:7C:47:E4:AD:14:81:EC:91:65:5F:6D:FE:68:B2:7D:78:E9:19:CB:8C:74:D7:83:88:4E:D0:DA:06:66:8E:98"}}},"request":{"raw":"GET /hc/orivstrongholds/en/articles.json?page=1\u0026sort=views\u0026status=1\u0026per_page=6 HTTP/1.1\r\nHost: app.chatwoot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiJhNWUwNWVjZS1hNjNjLTQ0NzgtYjNiMS05YTRhZjI0YTJjMmIiLCJpbmJveF9pZCI6MTI2MzQxLCJleHAiOjE4MDM2MDkyNDEsImlhdCI6MTc4ODA1NzI0MX0.a3RDUcyEW8uHogQG7yP5mXtFLxpn0cd64bh0cEExaC0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 42\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"e0cd4e8a609852c92a26a8120d401e3b\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: fee249a3-9e42-4d3d-bcdc-fdcd8b39f052\r\nx-runtime: 0.014502\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":552,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"faa82bb46979f2ca983dd1340c1911be","sha1":"29cd952f06ab5c96d67a20b89234ebec7a93f31f","sha256":"e0cd4e8a609852c92a26a8120d401e3beddb5b985ee31ed52cd12b73f67e0179","sha512":"c3c5b44c446d79ef32cf93ddda15d776817e113cc74ecf6baae11e053b815d96ff4f11830bb37bf4cf3eb7a56028e305a2734e6b12a573a64cd6c8f723b00ea8","ssdeep":"","tlshash":"aa90041431544f730c55554054c44417d7c31415f4f0011411d1c01d4704c471400d30","first_seen":"2025-01-25T19:25:50.896706Z","last_seen":"2026-08-30T02:34:42.394433Z","times_seen":12,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/bootstrap.min.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.686Z","timestamp":1788057238686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/bootstrap.min.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=biSxdjJGmva00%2BIf0C97%2FOltbnaZQdL%2FXFsfBW0MMhwcqdbOCKi8uXFHhAR%2Fwanpoa%2FNTZfmUH%2FlkaIrnF1j7lKsxvr0m5oQR4jpaIs%2Bln9sEnP4%2FH3YshoMtwMfMJ3C3QV%2FTJVE\"}]}\r\ncf-ray: a33064cdc980b51e-OSL\r\ncontent-length: 21195\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163862,"size_decoded":22002,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65302), with CRLF line terminators","md5":"64bb2b5bc1d4ce1f2b73f49200e022d6","sha1":"4a25df2c842d0f4f038f29377b635184569e2313","sha256":"cb8e6f9631be048c0e0cac4d93fca3931f0aa2c4d6e5c83a2c22b667ed0f093b","sha512":"1660678a126d2b52787a138f99b667f0b6a4cde8de2711a7e11cebdab39956320afcf2a9a17d91c0096a37d43c9da864915cd6e422150a64f42367a695af6ed8","ssdeep":"1536:lt04T8if0W8DsEBpy0cuJBt2rIWE5e0VUpz600I4fT:lt04P0VUpz600I4fT","tlshash":"98f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.784939Z","times_seen":580,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1001,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/meanmenu.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.706Z","timestamp":1788057238706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/meanmenu.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BvHRhya7Fjipvm%2BaxPgjjplFfqqcRIC0h2P1v2GZoURm6tKs6%2BNjDz8mwlqNlUKrTr3Hnb602Rh4IikneZRAHcAO7XQqgqJ3iFJjrC2ug5TCYip03QatwssaxwxQpBUeEkSSsIm\"}]}\r\ncf-ray: a33064cde989b51e-OSL\r\ncontent-length: 808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3151,"size_decoded":1599,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"93fae0ffb1b096b0233875f166557866","sha1":"f49ed4ded57ffc6bdef92496e2a6e35cc77a2c71","sha256":"3886b107ba24c98a804e32fc22b2751b84e0b40acdf33a32142902ce076fc045","sha512":"61174a758227ac8950578feacfbd6906b1dd1c8981585800b4b98cf27d08f8929461207428576479fbc445925b57baaff3fab18a92d86f493dcfc2969727de51","ssdeep":"","tlshash":"cb51ac54da7b1099fbab967ce671d3287ee4b05baf0fc1acb4fce520c28435824611c9","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.74458Z","times_seen":607,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/invoicing-image/circle2.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.970Z","timestamp":1788057238970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/circle2.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1v4rK3FjXB4H%2BIFNuLsSehUOWnIhDDDEI6XDfBIqLQdwQFBAPfB1loNaTYw354kyjyk3bwmgm3EeFIf3bk0Gz%2BBJEL8OQYfCguSOztZ6eMnKuNaabAKqJlQyHubQ6ChHsqtBt1N\"}]}\r\ncf-ray: a33064cf89a8b51e-OSL\r\ncontent-length: 2040\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2040,"size_decoded":2785,"mime_type":"image/png","magic":"PNG image data, 199 x 194, 8-bit colormap, non-interlaced","md5":"e8dbe3b7692b2ce535ef2b6ef2790a2c","sha1":"95a7b7aeb26abeb0a0e7ee14289af8a25bfe3c73","sha256":"652d894377d69fbf54715637a7dea271c3de099be2c422acd614493bd9656bde","sha512":"295ed174620b9454516a7e510ed475f3d4083fb74fc3163196a9ff60528b6ed8a973458b48f10172412a3ae59fdd28be40e5f5380c792232e75c90a05c4c20e7","ssdeep":"","tlshash":"6141fbd979889b7c976c967733a9e916eb7e143d7a1643efc3ac6453447d0103c01051","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.789422Z","times_seen":561,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":857,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/img/mobile-app1.png","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.972Z","timestamp":1788057238972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/img/mobile-app1.png HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9SX7ei6STDzvP2kzlT1HGftTCtq5SDcJepJLg2ZR7R3kA0%2FgWLN%2BJenrDOS5%2B9TJ0uYU94w2UpC9kizwAyXMSkhZRJUR9C0CRfP%2BQe9mhaRqXh7jQ%2FxSg6pb%2BF6t2LmGUaiHtLCe\"}]}\r\ncf-ray: a33064cf89aab51e-OSL\r\ncontent-length: 34784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34784,"size_decoded":35538,"mime_type":"image/png","magic":"PNG image data, 379 x 516, 8-bit colormap, non-interlaced","md5":"699b168204a76ad1e27c5f4143ad1fba","sha1":"72c7b5eeb71c55ac41c695398869ad037d9973a9","sha256":"35e92b0810c69325db809fc3b87efe340a6701156e2c8ba28a7107b591b4204c","sha512":"40f01539416852d5ae43e6cb8f8f9b252deba45c7cfe3b1741780ddf8381b4beb571dd945df74ad6c5df92b2fa4c3ecb2350e9c994b352a82699c4b60babc2c6","ssdeep":"768:n9jREbqf7qd/qd07jKufx3++WK5ENO9bvwGc8C1tvNmeRrmI:9ji67J6nKu9++WY9boGVCXvNmeR9","tlshash":"6cf2f1e5c11d9d83912bc1ea33558ac9003a1bb505c68b26e447fbbee859f07cf9b611","first_seen":"2024-08-29T11:46:34Z","last_seen":"2026-08-30T04:54:51.748338Z","times_seen":352,"resource_available":false,"data":null}},"time_used":951,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":941,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:59.808Z","timestamp":1788057239808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://orivstrongholds.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 05:14:37 GMT\r\nexpires: Fri, 27 Aug 2027 05:14:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249562\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-30T06:25:18.682343Z","times_seen":34915,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/js/contact-form-script.js","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.947Z","timestamp":1788057238947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/js/contact-form-script.js HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mr%2Bg9XBeq7XpkJCgUYwxMLnyGW%2FMdb0NKF0HnU3MEpCua3oj4Rd5FxEfaLBLnDkU1HNt7kJWQmQ72fkvUeC7EqbNXaOSfUDA5Du4dwsb%2Fu4iyVhI0uBX5s2q7PAlb58QOh%2BaJQ%2F0\"}]}\r\ncf-ray: a33064cf699cb51e-OSL\r\ncontent-length: 674\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2144,"size_decoded":1429,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"3dc6989850222aee1a68cc132426f035","sha1":"f6a762662c4df511e97df3f0dd730b64aa31cd9d","sha256":"bbe7b53d11fee22a044cff9a34d37fe623ad369becd7a442e3b4f268e5d603d3","sha512":"2d2152378e98221bdf87e05c0d5fb7a97a69a335f565e5ea260dbf893d3bdb4237740a3577b6b3061759c9870b96dd0c875303c8bdb39547b6ac4f7dadc33fd7","ssdeep":"","tlshash":"5741bd08651927c40a333b7de69a9104df611363c505eb553caca9d46fb8f9831a1fbd","first_seen":"2023-03-10T17:30:02Z","last_seen":"2026-08-30T04:54:51.758151Z","times_seen":351,"resource_available":true,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/widget-Cxg5VsaY.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.926Z","timestamp":1788057241926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/widget-Cxg5VsaY.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Fri, 28 Aug 2026 19:12:11 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 28 Aug 2026 18:52:08 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 112910\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: kSBiL66aODcK2TMIHPBdQ-iHH_U-ScBCNJ4-zJzuOZq56zYW4SuGBA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":96606,"size_decoded":28657,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64431)","md5":"33eb12b2cb8fd06d70d322f8a17bfb07","sha1":"3003b05fe02ff0785eb1100f7c74ef9db5c10019","sha256":"fa8ec13fce84048518368dd4ca00365a52b3879d959da063cee81e3270dc2dc4","sha512":"773256222cf9446c123aa1014395793115695de5d9e3baf385a6d9d5732772e651f8851f1d7f9089e2b73234af5a6f7f3b1c3f6790d71b032522cae45a710b80","ssdeep":"1536:4ebu0tS1nvNl2OVHk9aGQlSHlWPwoLRfQE++qkhk7ZofOhx:4eSAQlSHlWl1HDS","tlshash":"07934ce170d3957707a388a4b02e2105b33a8e6599c9f850fb9dcdc6794a48c517bfb8","first_seen":"2026-08-30T02:34:42.400041Z","last_seen":"2026-08-30T02:34:42.400041Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":20,"connect":8,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/widget-sjTlNeMX.css","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.928Z","timestamp":1788057241928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/widget-sjTlNeMX.css HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Fri, 28 Aug 2026 19:12:13 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 28 Aug 2026 18:52:08 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 112908\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: Um1DvPVpVTifTXa6dtGwNAYobT8Z1z3Rjums4b0JgdwaIJZ2yjdrJA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1543793,"size_decoded":150547,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"e24af4d7b3c737b7ba0f4c935c91163e","sha1":"b1e652124954caa9096c32c2597c0a2aecaea4cb","sha256":"e21be2336744689a1100094f72ce3feed0ae90868377d24fc4779d5801bf4bdb","sha512":"79158a3746abde3539d360264c6c4cc6148600ed91a222d068fd695cffca3e88f29e1b98e0da4469e1f18cc7a91da8b080e0ba2017887a80c4dd6e0693f64fda","ssdeep":"3072:lthJPWw8mGT3TrTbZmZ2ZueiCsAPDvtkIdFZ2VNGJxA7vSk45dRWKkJ1v4z3h3Jk:Ww8m6DvpJxA7vuWKkJ1v4RZHCei","tlshash":"ff2545bdf79d967e9c0bca22ab3f7c14531fe2b473484260496e0730634a216f96bd64","first_seen":"2026-08-27T07:23:15.426185Z","last_seen":"2026-08-30T02:34:42.401768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":10,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/constants-lVAyZKq6.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.939Z","timestamp":1788057241939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/constants-lVAyZKq6.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 157\r\naccess-control-allow-origin: *\r\ndate: Tue, 14 Jul 2026 05:38:45 GMT\r\ncache-control: public, max-age=31556952\r\nlast-modified: Mon, 13 Jul 2026 09:35:42 GMT\r\nx-cache: Hit from cloudfront\r\nage: 4049716\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: LoKXDRNV-g7PINNbqiVbBbB56jRr2cw8AOPlB75Cv2nl1lubwxrNUg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":157,"size_decoded":654,"mime_type":"text/javascript","magic":"ASCII text","md5":"c23eb02c59275cf91b59cfd6bbcc315a","sha1":"6d75b11d40836ca533dd3c2230ebd9cc7e927c9c","sha256":"af3915fac7511beefcbb8960c26748c2ddf6a7e0f588e71261cf175455b3fb97","sha512":"94b2ab23459feb51256816f600cb4129bebf70026b8774057e059187650f92bcde7815f5d71b0be51ed10ee3bfc4663d8a9bd8c8485a7c5b3e6acb8b031bb6d5","ssdeep":"","tlshash":"f0c02b0b6db45e7556301b3fc3a2500b2e0ca08df1afdda8fc08d0e186a25c36638d24","first_seen":"2024-10-25T14:46:11.754013Z","last_seen":"2026-08-30T02:34:42.403652Z","times_seen":2054,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3smg0hrzo6i7w.cloudfront.net/vite/assets/Validators-Dtl_R66K.js","fqdn":"d3smg0hrzo6i7w.cloudfront.net","domain":"d3smg0hrzo6i7w.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.chatwoot.com/widget?website_token=M623GeXuD2wcdUy1kgLxWb4q","date":"2026-08-30T02:34:01.941Z","timestamp":1788057241941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /vite/assets/Validators-Dtl_R66K.js HTTP/1.1\r\nHost: d3smg0hrzo6i7w.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.chatwoot.com/\r\nOrigin: https://app.chatwoot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ndate: Fri, 28 Aug 2026 19:11:47 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 28 Aug 2026 18:52:08 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nage: 112933\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: mUTKHxYjoZU08LRkRxW7daDtpJ0zQOekFgNVrc3owH9qMoqiYuamKQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":70870,"size_decoded":26893,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (35292)","md5":"115aadf2ae155b6f123b2070ff948628","sha1":"f8d5763e6c579077ff4226633e30df5d900a2826","sha256":"c4d0460175a422492941594a1f102aeb77395dc20df6395b13b82cc1b386d2e4","sha512":"5ec3cd97708691ee71c75fad7c0fe506354ce58f918d278b7f7c38c877c3f4016c57a88ccb497871ace4508af95fdd4bddc7462ad0b9df0d66fb89bb939c2528","ssdeep":"1536:ifp+tO5BXfsBBpHw1e65/jemB09fKTaKNWfu:iBxX0BBpQHyrfONKu","tlshash":"4a63e6d872d2b03253ea06a6507a010af7395d90344ed1d4f52d9cef3db684a92b7e3e","first_seen":"2026-08-30T02:34:42.404389Z","last_seen":"2026-08-30T02:34:42.404389Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/animate.min.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.692Z","timestamp":1788057238692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/animate.min.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KMufQ7JbMU2TfEt8KCkGSigtXyDkugw7I2hWhG9Md30PBR8l6oGhbT7hvtCo9Tdvl1Fwnhw3s7JpXx28F%2FTjOCHIxtE9iXw7lLn7pTbA8K4lpdIizEy155vUimQ2SN2BNTd3P7B1\"}]}\r\ncf-ray: a33064cdd981b51e-OSL\r\ncontent-length: 4829\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71756,"size_decoded":5619,"mime_type":"text/css","magic":"ASCII text, with very long lines (65342), with CRLF line terminators","md5":"b3d5b75898f1ed885c7d2b538faa8b81","sha1":"bc96496831f4df311443b8e3d76cfc17db53a988","sha256":"a61e123314188bd0453320008e01b4bbb665bee09039f4cbd9bef44de410ce67","sha512":"be097927cb6f3c12ee4140a60f11dd56bcb1e8661b35848f25f1ae2417b65190924d73d2d01c04c6763fc2c50d3931cddbc2aa74cd945f84145d3f3fe451f433","ssdeep":"1536:X6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:ykZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"006329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-30T06:25:31.391788Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/fontawesome.min.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.694Z","timestamp":1788057238694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/fontawesome.min.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMV5G1RFes3Hrx6PPCyAhotKozXoffNukbhC561EOfc8MkmOYAkmGuZ%2BtFzgPGjIz%2FUR%2Fbw20qpKXLfKa9xEcm9yBagG9p%2Fz7hyr71HLzRWle6ZLS1fH3JXeTqqONGPFE9YlRCoT\"}]}\r\ncf-ray: a33064cdd982b51e-OSL\r\ncontent-length: 17720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":89166,"size_decoded":18517,"mime_type":"text/css","magic":"ASCII text, with very long lines (65312), with CRLF line terminators","md5":"c858b27aa3346543c8a9fa0e8e48bf96","sha1":"682d2201ea724790a5216a74690362a32c201126","sha256":"51378e1e8afaf0d01dacb6da2997f918193e39ca0dfbf27b3d2bee66274403c9","sha512":"c28ffb3fc229404e589944c31aedbad4f453efc3e119531ace0eade726fc61460d68ac4272c717d81f18031d938a2688be7c8e15cc4ab77e42a00766a9682923","ssdeep":"1536:KbMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IVVUHsR+v:cd1NY95IVVUMR+v","tlshash":"5193a9e9e04c05d56732c44baf99b37c65b6f73cd5810da9f02f580c1ad26a822c6f7a","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.785855Z","times_seen":593,"resource_available":false,"data":null}},"time_used":951,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":951,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orivstrongholds.com/temp/custom/assets/css/nice-select.css","fqdn":"orivstrongholds.com","domain":"orivstrongholds.com","tld":"com"},"ip":{"addr":"172.67.134.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orivstrongholds.com/","date":"2026-08-30T02:33:58.698Z","timestamp":1788057238698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orivstrongholds.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:39 GMT","end":"Sat, 31 Oct 2026 18:43:49 GMT"},"fingerprint":{"sha1":"BC:DD:D3:7E:73:D0:A6:E4:99:42:28:CD:3F:06:CA:FD:1E:ED:36:11","sha256":"A4:B1:73:4B:D6:BF:39:9A:95:12:64:12:9C:C0:CE:67:1A:CE:65:24:39:7D:CB:E5:44:15:42:9E:93:5F:B5:1A"}}},"request":{"raw":"GET /temp/custom/assets/css/nice-select.css HTTP/1.1\r\nHost: orivstrongholds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orivstrongholds.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlVDMTVDMHc2YkZXOWNwTVJUUXJMR3c9PSIsInZhbHVlIjoiRzVKNUgraUh5ZkFlTjJOQnJtR3VDdFRhM05Gb2tuRzdZREtXcmVmQVBGUUM0cnNDZHhBYTFTM3FMNWhvbmhwVmNEU3UvWEgzSC9Rd1RLR3d3c29ibk1uMVd5aGJxdEZndGh2cTNxUUdwVWw0TTRsa2Q1K1Q2dzc2TEUxa3U0RkgiLCJtYWMiOiJhOGI3OTI1MzkwNjRiNTQ3MmQyZGVkYzQ1NzM4OTc3YzRkZWEzNGI2YzBlOWY2MTI5NzRkODQ2OTVmMTY1MTI5IiwidGFnIjoiIn0%3D; orivstrongholds_session=eyJpdiI6IlhXOVFrNURTTEpUcXI4eDl4QjRXMGc9PSIsInZhbHVlIjoiZjc0andnamNEL2orS0N4ZkdxRWdYWE43dm9MbUduQzZtbnhGRFBRTDJvVUI2UGcxTjdFWG5WakwxTGw5a3Fkc1VUNjlld3U1RTZscklJNGRxM2NHRHJBNFNyVWd6cDl2d21DYThBUThMb1pWV0pBSHFka1gySkc5Um1kZU9PNmgiLCJtYWMiOiIzOTYwNTYzNDVlNGJmMTY0Y2EyZmY4NzE1NGFhMTcxMTg0MmUwMDRlZTI1YmNjYjkzMTFlOTQ0YWNmMzQ5MzAyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 30 Aug 2026 02:33:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:33:59 GMT\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kma9pm9F5HJhB1Kx%2FhT2Fpj412DtI%2FrOEdF9QzrqLERRVFh9bOVvXvKT2gpI58iyVedmjCk2iPlv4KnGCbyO0y%2F31h%2B4N2g7f1nLuUrSZtTZS3RtJs2G%2Bx8%2BMFYeXcSx4iFxW2tT\"}]}\r\ncf-ray: a33064cdd985b51e-OSL\r\ncontent-length: 864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3185,"size_decoded":1663,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (3070), with CRLF line terminators","md5":"573b75cc4e984f9fd2d7f0bfdef2eed4","sha1":"318d8e184c0b00ea15e324fd3b564ea7912cd7b8","sha256":"d8ba2f0d8e2516ee382a764e506ab91b4b1b02c8078bac475b10aa2d83494529","sha512":"47a28314bf50043971d2d62fadf7c1478cf2195b0c4dcee1e7417cd078bcb97b4bf9f125ffccbfd73cee763ecbdd0cc79281ff488a058b760b413e58fe052f5c","ssdeep":"","tlshash":"cd610f35d551216ff07fca3bbec53b68243dd20368324a9ef244ea07834a16998ce70b","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.754808Z","times_seen":585,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"orivstrongholds.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"orivstrongholds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}