{"report_id":"52e5b0ee-17bb-430a-89cd-ac04258bfd09","version":0,"status":"done","tags":[],"date":"2026-07-21T18:43:26Z","url":{"schema":"https","addr":"ovinraherbal.com/","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"172.67.130.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ovinraherbal.com/","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"title":"Best Crypto Wallet for Web3, NFTs and DeFi | Trust Security","dom":{"size":126238,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7049)","md5":"8043134413b24f518aea915ae052e33a","sha1":"3cc30e277ca8584540656a50697a48975ee9694d","sha256":"3aedb15ea7652e650b9da9468f636ae81f36888a26ee9e050ebb565dfb748e87","sha512":"cbd6673c643e697dfa4525c37eecf291803b1e9cfde2a52d0f5a0446b21f8ecf68c81c08cda937d503e24f387a6f6b92ba8e368022e2b49d106549c77bba0cb1","ssdeep":"1536:acV/AdlkarwIDBUihVnlmjiMpsEzfEfdqG/U0+febrq7LmwmjZH8RXe0uif27:9YZHJiq","tlshash":"b9c3e8a1e6f851b7914383ccc159b12435f7617bfb809110b2ee0e685f6ac8b781bd7a","dom_hash":"domhash7afd68c913e939a45f1d6a5082882d02","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ovinraherbal.com/","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"172.67.130.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-25T18:43:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ovinraherbal.com","ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-14","domain_rank":0,"first_seen":"2026-07-21T18:42:27.056277Z","last_seen":"2026-07-21T18:42:27.056277Z","alert_count":82,"request_count":41,"received_data":8865438,"sent_data":21301,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":14846,"sent_data":572,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.amlmonitors.com","ip":{"addr":"85.120.217.17","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"domain_registered":"2026-07-03","domain_rank":0,"first_seen":"2026-07-10T08:17:13.432119Z","last_seen":"2026-07-21T18:28:12.201926Z","alert_count":0,"request_count":2,"received_data":7208936,"sent_data":955,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":4,"received_data":197380,"sent_data":2300,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.amlmonitors.com/scripts/main.js","fqdn":"api.amlmonitors.com","domain":"amlmonitors.com","tld":"com"},"ip":{"addr":"85.120.217.17","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d56d3ea7182e3de3cd9ed9f52727e8a4","sha1":"8966d659cd587c7b4b4f9f1d6db0809100538495","sha256":"8ee443fb009b90619aac79187963357180a9c75210755a7de94396ff1aa0ed92","sha512":"098b32a41784e4479c1ec26f635f02b08f26fb3508071f663cd494be55ea2334c418f3e35784eb3212dcfd9eb939053ae819bcca0bdf4edea9e7f6e3b4710075","ssdeep":"196608:/5hVyEShbZ3SvTGQdvnzibIyzE7sz1Zy0lQadPFoTJ55yq3+H:/5hVyEShbZXi/zibIyzE7sz1Zy0lQadl","tlshash":"41764a8073a5b476439a51a8543b1405f33da859901d806cf7ecd8f7bfa89c98abbf34","size":7207060,"data":"","first_seen":"2026-07-10T08:17:19.832471Z","last_seen":"2026-07-22T10:06:55.640268Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/js/visit-tracker.js","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"acd8d961cb31db8e67cb777d85f5ac60","sha1":"ce20c2feaa668b4200e7972ef3a33133895313ca","sha256":"32ed533bb09794295c59b07e4b263ac0b0a79750eb643819a36930ac59a82048","sha512":"07a09d5f473e53d584d82a6c6669f6b8b15bc5e724313dfe4a52f9b7b6542d2059344f3220790b7b94e799f15bb7600b26be9ac836472736be0bc563c0803faf","ssdeep":"","tlshash":"0121eefa080220354577a32b691ea604f737e17b328271a379bcc5142fb0f1aa1b5edc","size":1381,"data":"","first_seen":"2026-07-15T00:06:05.218398Z","last_seen":"2026-07-22T10:06:55.628304Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9b9fc45350e20258663e630b54a52d6","sha1":"22ede29bb05574d01db62aa32a6a504348e1d2d8","sha256":"3cccbd630bb528e21fb54584b068728159cce97b97fa791598606e60a39be75f","sha512":"cb6ad72deb05f1dd0c3c231e3c84c2fda864a0c31a70f08916591df2d0f6409fd151d1f9767573e169e2a8dc89445f99af1c438405f7011fbad17b8f56d61287","ssdeep":"","tlshash":"55c02b743088041701f11d7cf0a95f8035370c0098481102803cc44104b5dc7c200dcd","size":132,"data":"","first_seen":"2026-07-10T08:17:19.821358Z","last_seen":"2026-07-22T10:06:55.640935Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ccae4a8b919dda08077188dfbe14b53e","sha1":"a31ece485009f68a0ca1bd0b604169786c6dcc69","sha256":"1ad3606d782f62ff2246d80747072932be3582223f9ee7c1f53c0c6ee7ed143f","sha512":"600a2a2b3e89de13e3212ad580da02d6634874789654289df7f5285fcc33c7e10f1eb95e52b8f758e1adb2ba1f7e61dbd08dbab93c3d68e193ce4a0dc44d2836","ssdeep":"","tlshash":"2d90021104110412481d24a511461902319de42458421055344a81075909693348abc0","size":45,"data":"","first_seen":"2026-07-15T00:06:05.274507Z","last_seen":"2026-07-22T10:06:55.64162Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/js/i18n.js","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32de6c1359534eb7e3cae8b7c3162129","sha1":"72ee1e80f3ba7c06575d55fb7cff676298c499e0","sha256":"d456fa54f3be54ee321f644411872e2dc7daa30e52abf28787d76d65d0d4a8ad","sha512":"274c1fb5a9445dffebf8b34774348ad64ee75b3c86b0820cd13dd942c4a2cbeb16a9034474e433f94ff5c0d3e90f79ba09aac5b2f6fc1af4bc2cf8e3d9bdecf9","ssdeep":"3072:t7ctsKk3NpU5iU77G/tpMCqg1QGw95mJ/H:GOJ3EiU+/tpMCDCGVJ/H","tlshash":"3214953efebc146b04c2f605ed4c53aeb62c4735e6e15669316e8c7534afc98c460e2a","size":192048,"data":"","first_seen":"2026-07-15T00:06:05.247234Z","last_seen":"2026-07-22T10:06:55.624888Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/js/main.js","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57e3f16a5d19e826d0dbac7d0aacfc7a","sha1":"4ecb8ccd7324956d763ee28c69983f94b8b0bcad","sha256":"78864f2e4bdf09620c5f9f1aa62b5754cd136442fa606baa0dc83e8a69eaa2ea","sha512":"051634bb4a007c99ec9c479189af55b11d2eeab44cc5a46f7807d1ce1e2e045c719b1122c3eee922c3ca4ea7f8a395e72f318786be145555cf5033a6fe73d0e2","ssdeep":"96:OnAIf3rH8CvtBI07gvUONbOCIc+f45AsvkwbZWXP7PA0vCVTr5PUfozf3dJQrndl:QrcC1vLOqc+g5KYZez/C19tzfNCrD","tlshash":"f112dd6ee9153933847373badbab855cfb3211274042c6153eacc5842fb18665a72fec","size":9550,"data":"","first_seen":"2026-07-10T08:17:19.814402Z","last_seen":"2026-07-22T10:06:55.628801Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/promo-banner.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.119Z","timestamp":1784659375119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/promo-banner.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i3JIWn7XVbET0%2Fs3kEXmB7LjhmjWl%2BltV7%2Bt0Jq6rWqGCZfLBaOcCvmZQyxUeuSRtD5kFvHWyxIiXR57BGoxSPqTNTLICKsyyZ%2FG83WOc55f5UYzj%2FwF9gor3ESqpydrorFH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"6b2f3-6567b965e6a00\"\r\ncontent-type: image/svg+xml\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec592679ad56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439027,"size_decoded":147317,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c96aaedc31de88dcf3ef52c7c3935841","sha1":"6e93295f5c01cd1c189fe23016eb001a8e55e0f6","sha256":"e28c244f6e2bca46065cefce912a7c38efcf01d330eac052c38a868518b66864","sha512":"c76754e9c201936ca2efc34afa14652585309b3589286bd17813c5400dfb0146d3387a1800825a74c16ce5e19c9f54c14ea0a5809263d7a9e4bbae9ff20fd852","ssdeep":"1536:1vmgS3u5Wbw/A0XsxNzUFBfX/3MB/Qz78LOFL4nWXTe9UT+25Icr2CG17qA+mLQ9:195x82XKIVEpYOw","tlshash":"ff942efc67b020da98c4cfc37f5491fd322ba673a9618a04d27d3f5a095392dba45682","first_seen":"2026-05-13T10:29:22.963092Z","last_seen":"2026-07-22T10:06:04.571804Z","times_seen":26,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Wix+Madefor+Display:wght@700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.097Z","timestamp":1784659375097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Wix+Madefor+Display:wght@700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 21 Jul 2026 18:42:55 GMT\r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14162,"size_decoded":1578,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bfa506ab5c868dd4f1e4879267ad5a0e","sha1":"fc04023789ab121f464cd3341f99819138e83841","sha256":"c929935a4e3533473ac5c2b78b8800204cf331864fdddf883580899a69eeae4c","sha512":"5b72f509ba830b9127f9ccd2d23c0968c15f78bbddfde91aa39e6383e7103d8e7c10b09f3500bd8e47b897c347a77110c88b151532e001bc465f17400a5a2951","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGmqwPRNMOHq1PkYMfR:vXuM0p2+sioB+","tlshash":"da52cc92002ba400ab871dc233cf7f3aae9e10456485c5b96ffd0dc99ceed6653a875d","first_seen":"2026-07-10T08:17:19.806923Z","last_seen":"2026-07-22T10:06:55.627745Z","times_seen":22,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":34,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/css/style.css","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.099Z","timestamp":1784659375099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:32:38 GMT\r\netag: \"115bb-6567b9bf8bd80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tr1lOlsABXkz8U8XlKTmLQAYbv7AG77xuzOo%2B9KEveNj%2FBcs4P2N9VHwahIAiDI3H71Py4ldsUurQr%2FNJ%2B5zmJRj4THASH6Yq7TNV1uYNUy7cdgK1P1UUDAOVAeDWgDgrvaT\"}]}\r\ncontent-type: text/css\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592659a656b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71099,"size_decoded":12635,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2bec48008caf10b8727ea6dc0230352b","sha1":"d6ff1e0d8d930b3c8340bcb6579732b1ea32cb00","sha256":"51f4162344833ffd2287545ed78ce3936d35cb915a22c5f2d13dea16bb6b0b7d","sha512":"0e0a9d386ebbf24541e5ee03f5ae45301abc5715a805333a78e800092b391fcf073cebb3fcbe9c23e714f178eefe1ae2788b3cf592dea49b865c1311e5a5ed7b","ssdeep":"1536:t45WvZHx3NshtxcP6TRNvazOcQMcbJIHv4SjTYB6:t6o3NshtxcP6TRNvazOcQMcbJIHv4SjX","tlshash":"0d634117a3201159b837a778fbe79b89e6359023d302d1b8be9c1148cfbe2546671f8d","first_seen":"2026-07-10T08:17:19.80839Z","last_seen":"2026-07-22T10:06:55.634351Z","times_seen":22,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.amlmonitors.com/scripts/main.js","fqdn":"api.amlmonitors.com","domain":"amlmonitors.com","tld":"com"},"ip":{"addr":"85.120.217.17","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.104Z","timestamp":1784659375104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.amlmonitors.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 13:41:35 GMT","end":"Mon, 05 Oct 2026 13:41:34 GMT"},"fingerprint":{"sha1":"06:CB:FB:53:ED:B8:FA:D9:87:EA:E2:9B:0C:8C:51:19:B4:E9:90:B1","sha256":"7F:6B:65:CE:62:88:B7:54:18:28:2D:E2:5E:C9:AF:E2:D2:DF:BD:AD:CD:10:C4:92:49:88:E0:0B:38:18:BA:1C"}}},"request":{"raw":"GET /scripts/main.js HTTP/1.1\r\nHost: api.amlmonitors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\netag: W/\"6df894-19f37de9d60\"\r\nlast-modified: Mon, 06 Jul 2026 14:39:24 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7207060,"size_decoded":1988165,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (36062)","md5":"2a535f338486660edb85936543535a05","sha1":"5318a70ed9975297f818ee9491ff7b50eca93225","sha256":"b1926adb90101c6b2270201ce18a9d01f046178965e7ad9b248b9929728376cf","sha512":"628726f691a94b14aec3acdf3c0f1bc7ba79fe5ff56fc0b77ac1b440923f6da94fa1df4ea86872abe70d1bbd509455bdc010b49f919f69140f52a0f26422802f","ssdeep":"24576:/8GvGUPZV3xGx49eNY3tOU/O42swwy0GCAthbZdbd1S2y:/RvGGZV3xGx4gY9zOwVy0RAthbZdh1St","tlshash":"47255d9073a1f07643ef5199646b1101f238ac94504d446cfbe8d9fbbae988886bff35","first_seen":"2026-07-10T08:17:19.797213Z","last_seen":"2026-07-22T10:06:55.62368Z","times_seen":22,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":4,"connect":62,"send":0,"wait":169,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/dev-illustration.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.121Z","timestamp":1784659375121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/dev-illustration.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOUX%2FgsIkj32yi0tQofnr6Ch1umk8TFfmA1KELU6UloVGnmgeGudNzBV%2BTz%2BC4DFtXp8k3wwCd9OMZcVWbGQQkViPQaJ43zJWkgVRWecEFGqEQMsH5ZzDKqv1KTlpfQecS1A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"2765-6567b966dac40\"\r\ncontent-type: image/svg+xml\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec592679ae56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10085,"size_decoded":4280,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83986156dd8df49f40175538d33639af","sha1":"b67eb4b5fea974adb55977c6cfc42c3ce8b224d4","sha256":"be5bc71658387110e1776fe9d3a6eb1936d747edbeccef35bca7ef14719e0f3c","sha512":"819cfecc001cd9353ed5ccc8a0dca9848531bc26b61194581e29bd4b782e293a54dc55698e1ba5cdac29fcc7ceae9f6e4803796990be6fba397b7554266e0237","ssdeep":"96:9bEPGTGbE2GIywkC2nkDKk97uu6wW1J88PVyzXUtt00I/bCsQ5ZnQFZnS11FQqk7:pEPGTYEAGkD1hhWH8WOEq5gMn0+qkQCF","tlshash":"c022c8c677385d7dfa934facdf04b7e4302ea07a565e5398d2268a38114268ef91bcc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-22T10:06:55.63744Z","times_seen":1101,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/chain-bnb.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.125Z","timestamp":1784659375125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/chain-bnb.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:07 GMT\r\netag: \"6da-6567b968c30c0\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VaT0iRrezWWtkxMhyJPBP%2Fp9dzLot7y%2BaZ%2BigsPqLNShyqS5vjsUy8sAUnZK4%2BG5SLxq%2B2zTWzuARI8CtNLPTSMTV7s4pDnIZGeTcWH19nnfOCaeE6XZ2ixCmGtiXEvzKOWY\"}]}\r\ncontent-type: image/png\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592689b056b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1754,"size_decoded":2456,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"89b17f785879cbf3d1d08d48ee76dd70","sha1":"0bd44e2086c9fae061bdba405742664e28390cb1","sha256":"055b76eb55faace7d8053ff028b7c85320fc583b4934d02afb4314acaf5fd1ba","sha512":"6e7afa79a3ab2d709ee9bef78d751a89891fc2fe797e9799e7eeb487faa33316cde55e9e59cac78d283c3be1f690fc40657575706bdb0d06f934d9f664160c51","ssdeep":"","tlshash":"8d31e9ee5ea7a561e14ab5c7f3ad48008c7a4c5a001c6ea02fe67d624b0b3395fb9201","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-22T09:59:25.066868Z","times_seen":37,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/testimonial-esmart.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.153Z","timestamp":1784659375153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/testimonial-esmart.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:49 GMT\r\netag: \"cb1a-6567b990d0f40\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=28A5U7H8BMSKwK9nje9kJl9xH5GsVt3J1qgRT0mZ7Ts0PV2kpxnT1hIiQ8MW9%2BrPQUztGfPjMH4zCVH0rdchG2TAlqPobbXZtGgYEhBAEySdg4kZ3y0%2FgoR2a30xdfqgq4iD\"}]}\r\ncontent-type: image/png\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec5926b9c156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 51994\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51994,"size_decoded":52692,"mime_type":"image/png","magic":"PNG image data, 377 x 507, 8-bit colormap, non-interlaced","md5":"6793e775dcafe9c48bfabc044badd0a5","sha1":"0edcbc68be0830bcdd35c0cf9c306fd4951dbbc4","sha256":"f5301f8d5e46eeed4f4da7dd7a36ee7048d5f4783d2b6b800b55d005dfb552a3","sha512":"880610dd16cb6c3f9f37040caf2b9c958332f5b450848a1109a9d68b4c8837084badff8addff5bf3fa9939e94da54af239e43646baa8a6e466a4ac75cf7dfb53","ssdeep":"1536:PU3GFOchfbbSFoy5t5xIJSylrBcumOzgmJE:tFJfXSF3Sdl9Bld+","tlshash":"f033f2050558204c34668f6ef544c2f7da7fd0d882d2d1537fae2d59aeb87a3a8b220f","first_seen":"2026-07-21T18:28:18.88981Z","last_seen":"2026-07-22T09:59:25.08962Z","times_seen":12,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/trust-200m.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.480Z","timestamp":1784659375480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/trust-200m.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F0JfWK1rzwfmDRwtA9hF759Mif5i0F1%2B7K1scT5QweI8uAxF8SErAHkFgxMhS6R3V6SE0fLY75HAPr2TqlC2q5pmy2u850upjQIyQuh7%2Bz59lmOd4gTJHAakIVCWtrHmvPyA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"bb55-6567b96216100\"\r\ncontent-type: image/svg+xml\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec5928ba0756b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47957,"size_decoded":18509,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d7e451ccaf89fa11d02b6b5ee7c434a","sha1":"8d2a0e309b457eabaeb61ba94a33df8bb83e053f","sha256":"a5d09ffefcab6d46d385558dbfb6ddb8c3802aa0846501a1e51cef335dbfc812","sha512":"ce12f4b1b919ddbbf6567b00f29af18539037ac64cf91d36dd1fb30a3751676e9bdc23ab2ef79dfd5b8b1f38cfc4f2b3e5adf4ebb26970232dfc7d6313ef7b3c","ssdeep":"768:8er52+bKF/kIf+JSmcOgZPtsv14p6qnuNBOFMD2FFPNXQyvmZ:br5neF7W6Fty4p6quNBVkNNQy4","tlshash":"dc23fad6b734a6f4e4c747bcef29ecd4311a60feaa7182c8423d5b1c558b9c9e909c60","first_seen":"2026-01-14T14:00:39.531849Z","last_seen":"2026-07-22T10:06:55.632709Z","times_seen":112,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/nav-illust-wallet.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.482Z","timestamp":1784659375482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/nav-illust-wallet.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tPmvUCP4f8NCymkIQxNwXfp4zGdWdPYtdEDFuD%2F5QQmZJaYYL3qpW2KxlCmvl%2BqOCuUoxzg9YdmPbHiNu4wPizlxL2qa53zQMeEB5Pr%2BHhy913t9vsPaDQPvv%2BhiAcWpZWo7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"1b23-6567b967cee80\"\r\ncontent-type: image/svg+xml\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec5928ba0a56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":2659,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cda874259b72818dd657fdc8e026f343","sha1":"dff7963c2b7cc0a95b65d777bae56e7cf8a762f1","sha256":"00d4932ea31ede39a2d7348985c6dd5416b54e19fda923b866b5fc435e2d6c82","sha512":"3002edc71781a68f7b90c19806eb740e4708436510896f74f7e225fc851f87e111776a99fba399e6b1142862b02713e8c763398668f591267451b2ce5afe5276","ssdeep":"96:ArdFO+fLClvKoyTjtgI95CfDMd/kPpxPL:ArLOIyioAJ95CrM1Ovz","tlshash":"a0e11ece37440cfe7e26079aef2a72b9102255fb2d886200c53b1a79158165ead3fec4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-22T10:06:55.63387Z","times_seen":1045,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T18:42:54.295Z","timestamp":1784659374295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:54 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:32:38 GMT\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=11,cfOrigin;dur=223, cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUHUL0c7og3fskNRgcGTt8b%2F5howmGg0G8iMsl43cWpKJAhBai1bSWE4cs4uUag2qk9u9wSTYFTYsjtcEpjuSjNp0EvwWP1us88hqVidIIQyZiwh9xX%2BFxIH5PGAFnB6B7qI\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\ncf-ray: a1ec5921895e56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126103,"size_decoded":31263,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7001), with CRLF line terminators","md5":"989f0417758ec7294d5416efd37ba15f","sha1":"03f574e5f6e8d455bd684c3bcb2da4ef5f7b524f","sha256":"9e3977d2bea30c303efb74435334b11b18fd0ac06bac1fb21d8e06e94d8a4367","sha512":"d7a4d6a5272d02502c5f24186fdcc72d46c49c1967358385e539d9e6b4e376109c407bd8814139b845e981031ad382196b65cc94cb9f89ee5d4006fe7a6d7523","ssdeep":"1536:+MSzU7ZQarIots0e1LbhaXqV6IEzfEDvq2hYwqF2BsqjLFiu8Iu3Xe0RMbo:kR8IsF","tlshash":"cac309a0e6e811679123c3ccc169b260f4b7517bf780911072fd1b6a6f76c8a781bd7a","first_seen":"2026-07-21T18:42:30.882949Z","last_seen":"2026-07-21T18:43:35.035485Z","times_seen":2,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":8,"connect":22,"send":0,"wait":245,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/js/visit-tracker.js","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.105Z","timestamp":1784659375105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /js/visit-tracker.js HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:32:38 GMT\r\netag: \"565-6567b9bf8bd80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xu4tcLmOffj5IW7mVf1Fy%2BZS8KFjAZHeIHMcgrAY2XJ93lsIhiWPTzlkGlEsu9GyxKHcu0E%2BGCXwl85e6OagWO2TiuT7bgQXaF2IVzYdoqs93y5A7%2FcGkjAzvFdFdzlRGcyS\"}]}\r\ncontent-type: text/javascript\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592669a756b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1381,"size_decoded":1410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"acd8d961cb31db8e67cb777d85f5ac60","sha1":"ce20c2feaa668b4200e7972ef3a33133895313ca","sha256":"32ed533bb09794295c59b07e4b263ac0b0a79750eb643819a36930ac59a82048","sha512":"07a09d5f473e53d584d82a6c6669f6b8b15bc5e724313dfe4a52f9b7b6542d2059344f3220790b7b94e799f15bb7600b26be9ac836472736be0bc563c0803faf","ssdeep":"","tlshash":"0121eefa080220354577a32b691ea604f737e17b328271a379bcc5142fb0f1aa1b5edc","first_seen":"2026-07-15T00:06:05.218398Z","last_seen":"2026-07-22T10:06:55.628304Z","times_seen":21,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/chain-eth.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.135Z","timestamp":1784659375135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/chain-eth.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:09 GMT\r\netag: \"6de-6567b96aab540\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uV0ub%2FkRBlzirwwtxmVcJLVC86KSPeNomN7%2F0vEclsHbz%2BZuv%2BVeKZhiqot858ATNKkCbR325WFxujY4rOUVAhHUNLmmCvhzINVntPNOQgUDFGShzP4olzgDBKx1R%2BioGdOs\"}]}\r\ncontent-type: image/png\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592699b556b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1758\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1758,"size_decoded":2460,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"ea03ec91c1aa8cc419ca2ca34fea1b77","sha1":"4af154fb5f08f88e2d35b057d6675107d7fac096","sha256":"267fc1ae896ba0cc98d11cdbe79c3d7e044e35c6e20dc6be13702c11f9165222","sha512":"51f3c0b394e684e52e08a8dc675bda3fe9812b72907589b7a8984050783d805dcd91cb325c26a6983ec34c82c15b07bd548971e2b10e1f5210b9bac19e4a8dc4","ssdeep":"","tlshash":"fc310bc5621068d2d805276a409f5f31d95f6afb3c518f431645bc8ebc97960760ab5c","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-22T09:59:25.050947Z","times_seen":37,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.400Z","timestamp":1784659375400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ovinraherbal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 492853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-22T10:27:50.830705Z","times_seen":242057,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/mobile-application.mp4","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.448Z","timestamp":1784659375448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/mobile-application.mp4 HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:54 GMT\r\netag: \"2a3dfc-6567b99595a80\"\r\nage: 69\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghwVgxBNVDCmG0UgxSAMZHfcpUDxf4dX%2Fdi8E9ixd28BdQLwRgq%2FhnCFE0GaWCQhv8IEPiGwOMY%2B3cCdQQdM3DL%2BXGVhvE7A3PoSV42J01qNirQ07BE7jJaMuQvQ9ZIP4OCX\"}]}\r\ncontent-type: video/mp4\r\ncontent-range: bytes 0-2768379/2768380\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592889ed56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2768380\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2768380,"size_decoded":2769107,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"88b8ea29d1c3cd1f525e3d4ab2b5153f","sha1":"26ada213dfbf8728e86ea0c0bea208ca245f75a9","sha256":"307c59d3742f50cfcafd313b91ea62a4deeb0dacef2143307f5a0fc77ebc534c","sha512":"57422ac65704b20566088041e694ba063372ca18ea5556a71855cb96bb0ccd71501f9e0331d088d4d6ec9bb7955b2c7517e8934669d4848bef0fa1de0fc1f367","ssdeep":"24576:ToN6h4wRRSeN72qSClznDglRHh5XNazFE4V:TCqN74vh1N2V","tlshash":"6625f1ae4e9a5121ff8df93d9090c966e9e0ca41c9c2c30fb51c16414bbb1d64bbf5b8","first_seen":"2025-08-08T13:34:09.321772Z","last_seen":"2026-07-22T09:59:25.051797Z","times_seen":88,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/trust-iso.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.486Z","timestamp":1784659375486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/trust-iso.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EJZR4ASSJJJ3ksFPSbb3waHXRomnkJ%2F07qLtNNELLZH2urEMTMJB%2BCj7jxOVfcz6I%2F7dNyAWgdqXcBzWx5HaS9rGuI4ERhQFe7yP2K5gKU%2FnA5Qb1vucU47pJkJzmudSWl7k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"44f8-6567b963fe580\"\r\ncontent-type: image/svg+xml\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec5928ca0f56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17656,"size_decoded":5353,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f14b6dfda5913800b5670c4a578f1a2c","sha1":"021fb5416347fe73b174e42e4081b9f3a3bbcd2f","sha256":"13eb6bfe2e5a8d0f5c73a4ed195be1c6050f7d19e1c1728d95415792b41e37e1","sha512":"6736d1cec06fed125af4fdf52f0d6cedfd78d91ebbf68c63bf6b023d4284d741d8bb748e92610231f6649e2c2932147936236b0fd49356e9f488adfe9feb668c","ssdeep":"192:ap+6y1Nt5LKodvodD60cQMnrGEZc10QoJGq9eQNrICZICeHWVWlXccWyO:ap+6CL5KUvUOxNyEZDJX9eEhZhe2qayO","tlshash":"6582fdcb73249d7ef9730f65eb4a73f8201661a60b586b5c813618741b42b8ef27bc84","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-22T10:06:55.624288Z","times_seen":237,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/logo-header.png?v=3","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.116Z","timestamp":1784659375116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/logo-header.png?v=3 HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:32:33 GMT\r\netag: \"6b5c0-6567b9bac7240\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RLQFMSfXiGIvJwaIj9J4toAM2kOFE9UN0M0VpCuER1VJac9nuoDYeX8XBkxosK1WK6s6iE3NB6W8hHgTVeU9uuO9atFWSxHJgKXZ2q4TSyQNOHWl1YfzH2JNLbGx2Q3Y6Qfa\"}]}\r\ncontent-type: image/png\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592679ab56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 439744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439744,"size_decoded":440440,"mime_type":"image/png","magic":"PNG image data, 1502 x 486, 8-bit/color RGBA, non-interlaced","md5":"cb42bb1fc9054e99a586341fc4c11623","sha1":"ae231d7f230b8b99af263dee48955ad5fd26aaa8","sha256":"be0a81963e274b00e288089077da4bb748dcb3a991f7bd8db40964b37a67767d","sha512":"c09257c0724f49dee2fca57050c901bc8e357c3940f906ad55c8ecb7eb53bd242586db0976c307e3f7163721910074cc957417774367bcbb1479bd532749fe4c","ssdeep":"12288:5Yp2rNwuGiENBnr/ciYKAzjawBBK0hdi4ArV+XLCjYB:up2rNVqNNr/OKAzewbNd/AR+XLCy","tlshash":"f094232799036c4b3a5a9e0b4dfc31cee56430ef304d5aa307c6adee5714e4762da81a","first_seen":"2026-07-10T08:17:19.798837Z","last_seen":"2026-07-22T10:06:55.631929Z","times_seen":22,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/security-privacy.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.142Z","timestamp":1784659375142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/security-privacy.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrM%2B0gzJ9R3Hiq3tdJcchjWajwLi9Sypk%2BB8R%2FBNqRgBz%2BgkVwGW0PjmbdI8qK8Zbh50RLonE%2BEHu2dcqKfe2XL%2BHKDGcO2UWvQrmuCDvUSQ%2FW0ZzWIf3k4%2Ba1puMDV69%2BFu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"1225-6567b96f70080\"\r\ncontent-type: image/svg+xml\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec5926a9b956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4645,"size_decoded":1922,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c210d79d224dc0acca1c3beeb029195b","sha1":"75894cf8e5d238f788bd1d0fb258dac88c5b0126","sha256":"d1207a3591df9b2c69e8f08c29200283571c5744774d8e008aa3835957652a58","sha512":"d82594ace6a3cc531d7430a0d55cde548f4273f2ff170b51a93fa1c980baf3cce40bac295cdbfa444827666d7f8276860b854eaa4dd91bcbab07b277be2af6bd","ssdeep":"48:HRryHV/3wZy0xVsTtmv4jb3bU9UN6Zjamv4jbo6H9kMndH9XHO8laGH9XHO8eH9T:HdOAZrVsTsv2brHM1jv2bx1PL09EXud","tlshash":"86a176eafb2c9cbfe82787bccb48e1f5504d61d664c08368c2799f1e51046cb591aec0","first_seen":"2024-12-07T17:47:59.744392Z","last_seen":"2026-07-22T09:59:25.062592Z","times_seen":914,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.398Z","timestamp":1784659375398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ovinraherbal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 492853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-22T10:27:50.830705Z","times_seen":242057,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/js/main.js","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.108Z","timestamp":1784659375108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:32:38 GMT\r\netag: \"254e-6567b9bf8bd80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CuwBWUwbAfS2GYt288wQJhe1pDohUfym2gdj7W%2FKDVsYIcHfJkTBAcI%2FnK%2BlOc7H%2Bh2u3Gtn14bfGg4OMkxJr%2BAMKn7R4JeNIuiBq1Ih2p5mKidPft57AIkgWF4aaz%2FcPvFf\"}]}\r\ncontent-type: text/javascript\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592669aa56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2284\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9550,"size_decoded":3050,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"57e3f16a5d19e826d0dbac7d0aacfc7a","sha1":"4ecb8ccd7324956d763ee28c69983f94b8b0bcad","sha256":"78864f2e4bdf09620c5f9f1aa62b5754cd136442fa606baa0dc83e8a69eaa2ea","sha512":"051634bb4a007c99ec9c479189af55b11d2eeab44cc5a46f7807d1ce1e2e045c719b1122c3eee922c3ca4ea7f8a395e72f318786be145555cf5033a6fe73d0e2","ssdeep":"96:OnAIf3rH8CvtBI07gvUONbOCIc+f45AsvkwbZWXP7PA0vCVTr5PUfozf3dJQrndl:QrcC1vLOqc+g5KYZez/C19tzfNCrD","tlshash":"f112dd6ee9153933847373badbab855cfb3211274042c6153eacc5842fb18665a72fec","first_seen":"2026-07-10T08:17:19.814402Z","last_seen":"2026-07-22T10:06:55.628801Z","times_seen":22,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/chain-sol.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.129Z","timestamp":1784659375129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/chain-sol.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:07 GMT\r\netag: \"371-6567b968c30c0\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jz%2FFzsAwGt%2Bw5YcrHRBMwpUGvs4y0rYaoNUaBQCXKWR4wzUyy8w1ejkWvL440zSreUM177ExqE0AmcFdl%2B4TipvDQtNl6s43fSa592A0pn%2FuHdCLRwHSyZQxJBHsODNpxiRR\"}]}\r\ncontent-type: image/png\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592689b256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 881\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881,"size_decoded":1580,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"b2f528f1201e3a78262225d4e0b8f7bc","sha1":"04d9f97d12920181c2a0ff59fe73c4aebd5b3d50","sha256":"e4ad67ee735a6ecb5cf95fa3de33f6709d34b72844ae5509d7e02b17c1bc4ffe","sha512":"b93a8afda580fb78fef8c8b107e0b9d2f24e97ea171e1a6a2355dd667ffb0d9e7f40a75e72c6be814145b3a9fac6d21814f283ad59e4fa9e9a9bb9e28ea69375","ssdeep":"","tlshash":"b11163edad41ac22e19c4366849182bd733139bb20d72101b1e304fb8ab7b175763f19","first_seen":"2026-06-28T10:57:21.251021Z","last_seen":"2026-07-22T09:59:25.088327Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/feature-mobile.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.137Z","timestamp":1784659375137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/feature-mobile.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:10 GMT\r\netag: \"10024-6567b96b9f780\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W4ocNw%2F0TBVEAGj8vhrotwLDuCbmfx8Si1iFAocTaRMRgBUPNK4ig0d7ubAdWSbE7zDZQumjQvZO291%2FPnR08psST3SFJLZMJX%2FR7IZniwUSwbD1PPErOQ64JcthguLtRtPH\"}]}\r\ncontent-type: image/png\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592699b656b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 65572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65572,"size_decoded":66273,"mime_type":"image/png","magic":"PNG image data, 1613 x 1175, 8-bit colormap, non-interlaced","md5":"3390ef5298b4bd64e1251de1b0ea3f9d","sha1":"433851611f291f9a7038be04dc40500518b83778","sha256":"440558eb8fadb893a461bec260e4aff9b58318a6b6bc1852bead75737951569a","sha512":"377c36c399f4732ad20584b90f7e390c075926a561d474c114e3ae23dee18b5537de8b7ae281c23e656995ac31cb0edf3bf137518314da1cf11aff8e82e1429a","ssdeep":"1536:BtVA9ZCo1uxHv8WTonnjgR1y7BLeMDvZoZzkIqbhffM7c:LooxLMncsL1yzkZ9fR","tlshash":"0b5302ecfa680e23e01b7ef660c90c21937d1a2875a637bc82c913715c1d1a39679667","first_seen":"2026-07-21T18:28:18.867694Z","last_seen":"2026-07-22T09:59:25.07973Z","times_seen":12,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/browser-extension.gif","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.145Z","timestamp":1784659375145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/browser-extension.gif HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:56 GMT\r\netag: \"7e691-6567b9977df00\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWDoL5Lvvv6AfpNyCKRVtwRbIvcVvF92k7IQQEClhIz6WC3cc08aYxHqIbWtNFnA%2BXU6vuaNOMM1iK8%2BDe3ALUuJZC7BES3oA4alDjyzbXoRkkMmYTeN%2BviXvRYzq%2BcalbPF\"}]}\r\ncontent-type: image/gif\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec5926a9bd56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 517777\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":517777,"size_decoded":518481,"mime_type":"image/gif","magic":"GIF image data, version 89a, 600 x 466","md5":"e8e0af8c825a8a3f25eac8c0acb94662","sha1":"71a34bb1ed3c27f60230fd29e61fe3f2a05517c3","sha256":"7ea8205909e98e0dffd34712c95c0176ae116af74cb99c7aea039ed4b2fac9e6","sha512":"aa6da544ce9bddc1e774e9c9976ab856b6d50f6094a647616d4a330803625471228c16cdf9034f226e146edd31c63c9e787c039b91f63f2066d9c419f4731850","ssdeep":"12288:DT7bkLtWSA2kqD7CCKicc3GWAXFfoXO1OSQioD:XfkLtWVQ1LvpOOWoD","tlshash":"23b4f16da27dcec0be15203832592b324d9660dc9df9fe337268ff8b535661d68e0921","first_seen":"2026-07-21T18:28:18.86878Z","last_seen":"2026-07-22T09:59:25.067787Z","times_seen":12,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.397Z","timestamp":1784659375397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ovinraherbal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 492853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-22T10:27:50.830705Z","times_seen":242057,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/security-alerts.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.144Z","timestamp":1784659375144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/security-alerts.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:15 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rkpggBrKvuPccJ97qOP%2BYHP6tm9k8V%2BjV3HyvppsEClibp5TM6gCWUwu%2FwSwTqGZTtIuX7NPt4RmM4%2Bo5uS5%2BUNnV7%2F3fFEzEMiqx3iMugijUFxyH0iU9NUFjn2MslFp3NrK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"16ba-6567b970642c0\"\r\ncontent-type: image/svg+xml\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec5926a9bb56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5818,"size_decoded":2832,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1e6944c95750e2f20dd0902e8065b2c","sha1":"31540228a6b9ddc6cd4701720fb9b53210cb1e4f","sha256":"018c0cea41d585a7b4190176e7a18128a89e1aee685ab9e763741f376081b995","sha512":"e88c0f52743f841767e457a627248ddba418dab011ad59ef302b67a2da15908c8cc5045112348acd125fbbd83f236d4681fc64f54834d29ba6525718657d2699","ssdeep":"96:y2dqoNJZEMhiFeGnITA2dqoNorYvjfLVOgnXpv5pwYHBrhwYpWUoqZB2n+jOdFRf:hdqY38Z0dqJsj5v5iYZhv1Cr","tlshash":"3ac1c8d57734b9bcf0e70be9df10f9a4304e70761a559388c3a1ca3541969ce992bce0","first_seen":"2024-10-12T13:56:58.696978Z","last_seen":"2026-07-22T09:59:25.063815Z","times_seen":877,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/badge-appstore.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.146Z","timestamp":1784659375146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/badge-appstore.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:16 GMT\r\netag: \"11b0-6567b97158500\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJ2PDcmdYIjpzkZSBM%2FzL77HCcvVgrRNZZR0wJw4za9qXQ8rbPdALSPO9CtSCycg99BF4ZnQzUrN0JuZxhrfowhaSfPOkON%2ByrVSi072Pt%2FlzRyw2pp6rFdG5N9OZfxBFH6d\"}]}\r\ncontent-type: image/png\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec5926a9bc56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4528,"size_decoded":5229,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"c1ef96c92fe3fafea4f525df36e091ea","sha1":"1cc616978a0b4953a0c8b4a83a56ba84c6836fba","sha256":"151b822ca42d09aa8e6e8cffe001f11071f8b1dfeb63251b96dcce373104260b","sha512":"b6ed1e7862e846ad8f679c78bd5cdc7e136c901b8fc561f9d43036eb353047e91cec873bdf14b1f4a52500721a6c4edaf1755f00891ca11a2f5dcd41150584cf","ssdeep":"96:hVSY7WGBwlBTNPqLdRa0XyUSKLbzloH45UKq5jg/UHN4kRMuQdUm29:hVSY7l6zTNP+GOyUSY9E6q5MO9yo9","tlshash":"0f918e91833d0f8a4683a92d4c086d5504c2ef1722b266cf50696ca47bf3a671330ffa","first_seen":"2026-03-10T06:52:05.963216Z","last_seen":"2026-07-22T10:06:55.627256Z","times_seen":21,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/security-hero.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.138Z","timestamp":1784659375138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/security-hero.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xuvdKFu1gvkjDzr1vXT%2F%2BmeqAHKrSHZGwaCu44z0RrCywEYUX%2FkUSbmtFoJbSVyEu2bORfTsjbjB6uJUlTJstwl6l%2Buws4da39yTbxyFLPx4eTLbsOG3QkVQjNRtigmk7wGr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"56ff-6567b96d87c00\"\r\ncontent-type: image/svg+xml\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec5926a9b856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22271,"size_decoded":7196,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1645fe9e4e50c926db510f45d2670378","sha1":"325294dfe8267c63104646d60cdce3e201f6d7a0","sha256":"89f90f697ecb81bc6558e7a4df1abee65c3e45238e818631b14960c55e6b5ab9","sha512":"c569f384e77c296765cd60c630d8ac05d09e006b057e01f1a6940359d9b76cb3c62f613996be763b7fbd365c9496253ac985d1c2777e5977bbacb7e1775ff9f3","ssdeep":"384:jz7cy1KpXqwovhEqTjOyf731s1uhjNo8JNoXuhGYZe9YZ6iSqHmC/k6O+VgaCqG:jz8AVTjOyB3teC/kZ+yH","tlshash":"32a2b7ca6b385dbcf1c74fbadf2479e8200960ba0e2917d4813ea07d1657dcdd61ac94","first_seen":"2023-12-20T05:41:29Z","last_seen":"2026-07-22T09:59:25.061432Z","times_seen":889,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.354Z","timestamp":1784659375354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ovinraherbal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 492853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-22T10:27:50.830705Z","times_seen":242057,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":16,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/favicon.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:57.028Z","timestamp":1784659377028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:57 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:32:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sm%2B%2B2owinKO%2FyEFjndNG7DimF%2FHffwJZriNp%2B1i2L6bKt%2BE2CbSf%2Bl6YjXWmkG40K%2FtaI7CNx45z8Ec0iei%2BkRcLjlq2JYHducz6sjBRkGK4lDLzYJGTj9pvIWSOQGrL%2BIDl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"2d4-6567b9bf8bd80\"\r\ncontent-type: image/svg+xml\r\nage: 68\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec59326ad856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":1067,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd0f0d6ffdfcf30e2ebb826850fdfa81","sha1":"eb316892b7c78a0dcfc9bd03221d32adb674a317","sha256":"52ad5959ccf6cfc7e96b4e05bb21d5d6baf3cf76ab6adc676cf0b79dd4d66685","sha512":"f319cf7d8a2cc316c97e5b07275d1dffd0a81e0cac0fbeca092afb991561b0ea3a930e60c6414f64abe0b332912b3eed8c77e6a460760f9a724d9fd63626694d","ssdeep":"","tlshash":"1201471fde0de56be9a9d27df05885b263694182b981c3a6e7798f4f0400043498fb91","first_seen":"2026-07-10T08:17:19.804631Z","last_seen":"2026-07-22T10:06:55.634877Z","times_seen":22,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/chain-sui.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.132Z","timestamp":1784659375132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/chain-sui.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:08 GMT\r\netag: \"3ad-6567b969b7300\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZX3oeO855GqbgGdot%2FOGtXp%2BVZmhBTqdutwVg4uY9y%2Bn9%2FTe8Lp9WEWoKhyHcdKErEVRTXPDqfjXoCW8fHQIwZQjT%2B8qDZ5wMbNJOOQeUtIj5LogFN8NhUkO7ego4XkMGOu\"}]}\r\ncontent-type: image/png\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592699b456b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 941\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":941,"size_decoded":1642,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"e6b64e6ba2d82de4e10dea26ad64999e","sha1":"9c02ad1d44d805feb770cb990eadf91b4adf6c0b","sha256":"a3b406f09145951de6ba7477b8126bce7a6570aee000e8b2f47dcffd8f360498","sha512":"f165043fb269672fd6725bed6d11f19b2a5aa1a186308494fab33b816c4d352baf677c08059dd6d71c123905dbf5933a03be087a6cefc2e60ba4ebec247fa1d9","ssdeep":"","tlshash":"9811f7fd3fc74dba0a321320d2ea02164a1f2cc3981b991889bea247495fc803c5e3c6","first_seen":"2026-06-28T10:57:21.230574Z","last_seen":"2026-07-22T09:59:25.08379Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/trust-founded.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.483Z","timestamp":1784659375483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/trust-founded.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M71Xg7QO6j8RXeRalJJM5%2Bi1Z69O5KgphmosodUdF4akbHhtbwwHBqQDsDTGgGyABU40LRtjHeMCwvE5Xw1BY9flXxPe7%2Bl17yNH84coI%2BCc%2BPkoM%2BXGhC3KT23QBVD0Rxrs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"3a61-6567b9630a340\"\r\ncontent-type: image/svg+xml\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec5928ca0b56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14945,"size_decoded":5022,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ec212bdf6998495367ba9392b1d90e7","sha1":"198610fa74394b2986a2a4b1311448dbeaaa1727","sha256":"eb28a643ef02753d2ea041a818848219f6b0c8a81cd4ad2db2ea86ec5593a35b","sha512":"cbc914aceb1026e5d79f2c9c002a3f0b42456ceec0f25a186cc301e5bbce8d2863756e769d2e50a1cb7223725852abac53808847f84ea734586bb524e122c885","ssdeep":"384:xOALcUhGwm5CGIZupp96DvPyBP7wqDPKG:xOT+il","tlshash":"a6623fcb3714adbefa670ab9eb45f3f4211e607647983358a6354938010968fb87bdc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-22T10:06:55.638608Z","times_seen":237,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/trust-audited.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.485Z","timestamp":1784659375485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/trust-audited.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMU7KSLNnKaxK2oHssrUbxq98t90PdbvYl08fVIB6x1I2LZZCClUHfC2%2FkKb0UhMab34WMFlzH65kwa6iy0HNZGayFmyWQBp2nqS160mD3p2O2daEiUMA0ePBvcQYuFe76gx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"280a-6567b963fe580\"\r\ncontent-type: image/svg+xml\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec5928ca0e56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10250,"size_decoded":3822,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94df810c2ed1a1fbb3d89f767b243411","sha1":"fa0595f7d03ef2eb83c6ea2beadd23dce3e6579a","sha256":"1a07b51df7cce62e8d728ca85759d6a735fff8f54144660fc2b7206b9cf194a2","sha512":"231fb23bbe4cd8a1754f265ff7a4af7444cba4c6a3680fdeb7f49520a3822ca8e779e155373305aa192b35fac82a2c08930d1d4396dda2865cb5b191b686644e","ssdeep":"192:KAcdLt0TAR3pxOVpjWjZiO4NgCAtZ6wzvRx:3cdJ0UR3TgjWjZizqZV","tlshash":"8a220dce3b145dbcf93287a6db02b3b9202b49b707e56310ce361a79640195ea93fdc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-22T10:06:55.635394Z","times_seen":1052,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/icon-chrome.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.155Z","timestamp":1784659375155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/icon-chrome.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Jul 2026 08:37:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NzCFK8xwrpKmo6cVvGTE7c2XDjXmxFhHzdUCeP7M2sUQDTkkdD9ABaJP%2F2sN3kj%2FSu2VjG5uYb6vV1E9n4UIT7dGszXFWJ3W5iaZSLYPisakzpAIKFIJ3FUOQgeem75zWDw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"552-6562988adbfc0\"\r\ncontent-type: image/svg+xml\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec5926b9c256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1362,"size_decoded":1347,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a5029565e00af31a9a27f3b1684fc35","sha1":"bc85016b5dcea8ac783559737443331afdd45dd9","sha256":"0e9e92b76434807c4c122c26a2eecd6482f54805ac547a758c3ded023f249973","sha512":"fe9a880d21e21bd8632ed8342aa3bb482d50a0982901e275ff909f6a1d99fa50be74070d2a1d983e600f92dd9802d968e783102cb7165bbca84d15173e6b8cc8","ssdeep":"","tlshash":"8a21fe6de0eda53ff68e83b0cae9f4d0922864d821a9417df148671b7c50ac62508dc2","first_seen":"2026-07-10T08:17:19.817308Z","last_seen":"2026-07-22T10:06:55.635895Z","times_seen":22,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/logo-footer.png?v=3","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.157Z","timestamp":1784659375157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/logo-footer.png?v=3 HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:32:38 GMT\r\netag: \"aac5b-6567b9bf8bd80\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NxaXBk2Fnff%2Ffk498wirSx4%2FzZV%2FjeUWH8hOAjG7VjyIAFjwpObtf3DLDOzqGAjcYjm7WrZUL24EcBYrGqLquYnOyFRdP%2FEDA2qNzIbLgGSJ4r1ZO%2FxnDRYo%2B9Amt7Z7uINe\"}]}\r\ncontent-type: image/png\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec5926b9c456b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 699483\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":699483,"size_decoded":700191,"mime_type":"image/png","magic":"PNG image data, 850 x 1232, 8-bit/color RGBA, non-interlaced","md5":"1790bb75377a80018d8df6acd65731fa","sha1":"0aa9bf0432d28d7bdb78b6c75242bfb0872a0c11","sha256":"b7a457e03df01caa5fe3b1ab15356b16c36f2c6012329c003f19904311c1ce1b","sha512":"6b877fde5771fddffc79d9b57317f2762e67fc9140c691ee8eafe9c7d2c74445a023967542d7ffa57977412d8e894e8a74b699fc42d580345dd9056031146173","ssdeep":"12288:LniCSyyAJhc9YmaoQ4LlJGcXEfqHiLjg0A3ObQ9wU005I8nQLfFVAfw5gwxbwg3f:LniCbyAXc9YmaoQ8JGcXEfRnww0wBDT1","tlshash":"6fe423a9b19c371f110013f6472492717f2697b8ac81126b34bad8fb3ae4bdce974516","first_seen":"2026-07-10T08:17:19.81035Z","last_seen":"2026-07-22T10:06:55.636913Z","times_seen":22,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/testimonial-harry.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.152Z","timestamp":1784659375152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/testimonial-harry.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:48 GMT\r\netag: \"e489-6567b98fdcd00\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KEp0bOSazX2%2Bg4fAsKK%2FBTZDt%2FLmJNDkUfDjTNYVffoFrtTJV0w%2B%2B%2F0Hv2ppXPu2lokaOklvw5%2BmNKrPo8NBDHYyqjO5ccO%2B9nI%2B7pIo5%2B18HB6ZMoG1XL2ZXKbyMtFQUuSl\"}]}\r\ncontent-type: image/png\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec5926b9c056b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58505\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58505,"size_decoded":59219,"mime_type":"image/png","magic":"PNG image data, 375 x 507, 8-bit colormap, non-interlaced","md5":"1382c144be5d9a01950ed99f677695da","sha1":"22aac6aff04bc2399b4824296e8e2569359be2b4","sha256":"82e3abb1e76898927da7774a71eab68565d4fd360a206b94ff89a0aba1abf72e","sha512":"b9fa1c7b25757cbcfde6c7e460661fb41c260e9a10444bf89802d6f2754b512d9de8a507acb3f91001ebfbb6fc4cfb2c9c13205838dc241a17126da53b126ca4","ssdeep":"1536:edic4ONt7X6FQ8FNQnYeA8Yzn7o4889HfiDhMJ/5tOYpDRXF:edicPn6a88ZA/fnbthpVXF","tlshash":"1343022d825cb52f4a83e249b9098ad3eea2cd333b3c7397f552f999165f7005724c11","first_seen":"2026-07-21T18:28:18.883013Z","last_seen":"2026-07-22T09:59:25.057708Z","times_seen":12,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/mobile-application.mp4","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.449Z","timestamp":1784659375449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/mobile-application.mp4 HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:54 GMT\r\netag: \"2a3dfc-6567b99595a80\"\r\nage: 69\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GV7GfZvX1V%2FEWxlWtTLtfHx8ep8Ll2A%2FdihrCOxnfXDB2MObY%2FO1HMUdoWTqAAy%2F%2BV7qa%2FSm%2BQtfZg8DvqYEOrMHU3sYEdG5v5aLnDId1DZZT%2Bn1LH5Y4qiEQx%2FADR%2BAySR0\"}]}\r\ncontent-type: video/mp4\r\ncontent-range: bytes 0-2768379/2768380\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592889ee56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2768380\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2768380,"size_decoded":2769119,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"88b8ea29d1c3cd1f525e3d4ab2b5153f","sha1":"26ada213dfbf8728e86ea0c0bea208ca245f75a9","sha256":"307c59d3742f50cfcafd313b91ea62a4deeb0dacef2143307f5a0fc77ebc534c","sha512":"57422ac65704b20566088041e694ba063372ca18ea5556a71855cb96bb0ccd71501f9e0331d088d4d6ec9bb7955b2c7517e8934669d4848bef0fa1de0fc1f367","ssdeep":"24576:ToN6h4wRRSeN72qSClznDglRHh5XNazFE4V:TCqN74vh1N2V","tlshash":"6625f1ae4e9a5121ff8df93d9090c966e9e0ca41c9c2c30fb51c16414bbb1d64bbf5b8","first_seen":"2025-08-08T13:34:09.321772Z","last_seen":"2026-07-22T09:59:25.051797Z","times_seen":88,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/js/i18n.js","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.107Z","timestamp":1784659375107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /js/i18n.js HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:32:38 GMT\r\netag: \"2f159-6567b9bf8bd80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mdLW8QUqbU1DX2bbqy%2BL1QV%2BH02AevBsVsrG0qacN6oEzntPwkWfvV5bJ4cPbQGOLm4bLCTajNBg1DjGaS4eh6Qyuwmwgw3i30bHDUxXYhX%2FzVFOi8rlFo9XGf7xst4Sbxa2\"}]}\r\ncontent-type: text/javascript\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592669a856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54733\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192857,"size_decoded":55495,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54511), with CRLF line terminators","md5":"32de6c1359534eb7e3cae8b7c3162129","sha1":"72ee1e80f3ba7c06575d55fb7cff676298c499e0","sha256":"d456fa54f3be54ee321f644411872e2dc7daa30e52abf28787d76d65d0d4a8ad","sha512":"274c1fb5a9445dffebf8b34774348ad64ee75b3c86b0820cd13dd942c4a2cbeb16a9034474e433f94ff5c0d3e90f79ba09aac5b2f6fc1af4bc2cf8e3d9bdecf9","ssdeep":"3072:t7ctsKk3NpU5iU77G/tpMCqg1QGw95mJ/H:GOJ3EiU+/tpMCDCGVJ/H","tlshash":"3214953efebc146b04c2f605ed4c53aeb62c4735e6e15669316e8c7534afc98c460e2a","first_seen":"2026-07-15T00:06:05.247234Z","last_seen":"2026-07-22T10:06:55.624888Z","times_seen":21,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/check-yes.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.127Z","timestamp":1784659375127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/check-yes.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xJ9N65qGXtyfWo%2FpLs07Ry6epaHQphnGzMZPkwu7zTWgWEy64sxfKVnU08uJxFOFLJ5hY9qcQ5sIB1Y5veGuBa29XNH1r%2BvSzctazlbjUfBYvdIPJlwarHAR9Q0YQM5sBb6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"f2-6567b96aab540\"\r\ncontent-type: image/svg+xml\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec592689b156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242,"size_decoded":871,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f4688f797a5c7896d295baae00816aa","sha1":"11e8f9d17c7138fe665eaaac366f12d1975909a9","sha256":"88a812ffc8936f2f94e6596f8a2521c841b1b0e7e339a615acbfb75703558cbb","sha512":"c5bf2559275ab958b4b926f4a7b6917598e0842d469c26f627ff57911734184d6b9c2ed5b70c594a87b7a3cd5b93b023a019e01499f463220e31a1a176e65bff","ssdeep":"","tlshash":"b6d0952603581a1c4b2844d4e3bf71d4835f70ecc35503d4d0042911f09458fb05f1bc","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-22T09:59:25.087651Z","times_seen":90,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/security-encryption.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.140Z","timestamp":1784659375140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/security-encryption.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QHwAbJQEneqOAX%2BSiCViyobdUPFxtS4WOF%2BuF4cBkrcAxmMcp%2B2A9vZZDQgkNOTtQvdkq%2F%2BtjcgMzTsK5uJ%2Fe5M%2BPnT13pI6DCbwSJ9BDigwbqucsBiv3mrX%2BRILMhRof%2Fo8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"29ee-6567b96e7be40\"\r\ncontent-type: image/svg+xml\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec5926a9b756b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10734,"size_decoded":3452,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbda6fe9682d63433ce25aec010fb362","sha1":"90e234e481359853e1a3d40644dff49ce20f5934","sha256":"c6a0aa994362014ebe33193d0e9a16ec866d3787a32300c030f47fc45e2f4724","sha512":"a65f2964308672761d0c1d04eb449206231cbb1e9fa220937a89fcdf6f50339c037b42f56a7643d91edc2d7397bd5beef20ba1ef613cd9afa25f2a741b9d7f83","ssdeep":"192:SW2pQeCBWg8geYl7ByksxaThcuDNoMmNquwn6J9c3D32WMVwnNNqRSB:+oPsYVPZDmY2kju4Y8B","tlshash":"4122c7caf32869fdf6d34f59db1072b4260a303a0e66536c813d8d3c1a8560ee51fd90","first_seen":"2024-10-12T13:56:58.711689Z","last_seen":"2026-07-22T09:59:25.088977Z","times_seen":907,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/badge-googleplay.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.148Z","timestamp":1784659375148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/badge-googleplay.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:16 GMT\r\netag: \"b44-6567b97158500\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bvkgd0ZTvl20YUkm6R7Px%2FFzlhnCNSsdGBssQ9rrhjUnrOSr8pNtHILnIxip0PUEgc5StxXTv8dE1fvQCAlzPRs5fjaAUijK7OLPOIIHOer6Te7r6cdTiwY6GUO8EeLTBo0M\"}]}\r\ncontent-type: image/png\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec5926a9ba56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2884,"size_decoded":3578,"mime_type":"image/png","magic":"PNG image data, 256 x 286, 8-bit colormap, non-interlaced","md5":"5eb415900354b29d20c985276a9fc22e","sha1":"ead65909517824a02afb3754c43070017b83773a","sha256":"f0186952a28ae5562c75b45e5f5a6b662455ff7c79e991860f565ad3d3e69a2c","sha512":"a8f649f59d025f911ff39e98bb3696797622017b43a6ed7b7772e46b915a07acd0c1960ac3eaf2afbdb46e76b992fb2742452e370c29ceb3700164d898c3d1e4","ssdeep":"","tlshash":"e6514ddcd326f4fb407d2dcda985c2b2a5284f70151c9e49713e4e99ee1dc4a72cab24","first_seen":"2024-08-20T02:31:06.367125Z","last_seen":"2026-07-22T10:06:55.629502Z","times_seen":24,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/testimonial-juan.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.149Z","timestamp":1784659375149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/testimonial-juan.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Jul 2026 17:09:47 GMT\r\netag: \"c511-65630b0ececc0\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfCbX1H2HddWuXMk%2BGnYHF3e7SvR%2BmE9B0w5Lm2%2FzAQwVodeT8R9nizfV4%2BnOOtLJ2hNh%2F%2Bi5Y4fnlCSKT8q3fkErz6%2BbERKoRux%2F0Ab6tjUSMGXghtNv3M02%2BZeMBDoieDM\"}]}\r\ncontent-type: image/png\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec5926a9be56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50449\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50449,"size_decoded":51161,"mime_type":"image/png","magic":"PNG image data, 378 x 510, 8-bit colormap, non-interlaced","md5":"5f66fbb579a26b6bf406d991e1b92e5d","sha1":"ae1b6ef99fa1c33e595f29fac6872da7f86d356b","sha256":"3f46aee2938d368ee0e611e120e931b1446c7d3a60cdf0d49bf7a07f4cdd274c","sha512":"ee6108e1bb5a1dcf70c9a53ed8e19eaf4399c4fb2e705d44b15c8442b8850380569894f4a0887b0895b8b233ae59dbdd1ca7b7f4cbba626bd1a784ce6fa11aa3","ssdeep":"1536:HvHEMNeWVJ1cwnRPdEEanIGQeSAgxdwBG+:oWVJ1jnontSAd","tlshash":"b033026c02cc7e8ef2dfd6fbc4b1a685475c235153072e8a68a3a533648e1fc46a8c46","first_seen":"2026-07-21T18:28:18.882059Z","last_seen":"2026-07-22T09:59:25.07241Z","times_seen":12,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/icon-google-play.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.156Z","timestamp":1784659375156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/icon-google-play.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Jul 2026 08:45:51 GMT\r\netag: \"565-65629a6b82dc0\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9%2FKaAEqHKW9Vy6oGmiq%2BBY5L8kSAT1W8cH4lXXrjprPEzSArtSV72iHFkF0OXyiBGLPoah%2FIf13hr%2BnAo4fSOWdiKF2h6dQ2dTvFzZ3rSJG11Q0TVX6X%2BV6z9FZ%2BqTCsz1e\"}]}\r\ncontent-type: image/png\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec5926b9c356b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1381\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1381,"size_decoded":2085,"mime_type":"image/png","magic":"PNG image data, 96 x 107, 8-bit colormap, non-interlaced","md5":"7a46b63c45c17c244241728c85a7a6cc","sha1":"032f6674e8f7e5bb35a1957115f1cd36180deae5","sha256":"af275cb2f2c130144463274fcffd554bc85b5df999febf70d5aac1bfdcd624fd","sha512":"3bde1ba62f17b49ae22cd641387142e33534c79646ab3cfe38e88072a9f300cc2da80a3580b0ba05d69d167d484149f8254e86ed29bcbb5f181fd94fa155ee1a","ssdeep":"","tlshash":"5221b8cf325a4239996e9c7020850b5f8d8564e3193d61bcc82b885d4d49f6eee45730","first_seen":"2026-03-13T05:02:39.374984Z","last_seen":"2026-07-22T10:06:55.636402Z","times_seen":39,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.amlmonitors.com/api/config","fqdn":"api.amlmonitors.com","domain":"amlmonitors.com","tld":"com"},"ip":{"addr":"85.120.217.17","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:57.796Z","timestamp":1784659377796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.amlmonitors.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 13:41:35 GMT","end":"Mon, 05 Oct 2026 13:41:34 GMT"},"fingerprint":{"sha1":"06:CB:FB:53:ED:B8:FA:D9:87:EA:E2:9B:0C:8C:51:19:B4:E9:90:B1","sha256":"7F:6B:65:CE:62:88:B7:54:18:28:2D:E2:5E:C9:AF:E2:D2:DF:BD:AD:CD:10:C4:92:49:88:E0:0B:38:18:BA:1C"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: api.amlmonitors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ovinraherbal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ovinraherbal.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Tue, 21 Jul 2026 18:42:58 GMT\r\netag: W/\"467-+o4O3pPrrYGxBjv+iMBLWcGkq9E\"\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1127,"size_decoded":1005,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e570cd21bb12934dc08c347558b08886","sha1":"fa8e0ede93ebad81b1063bfe88c04b59c1a4abd1","sha256":"e31da84924bd6790ed690584afad2fdc07a31c193a3bf1b110d45e877f391110","sha512":"fcf3f7dbbcbbea66b83283549a36a44193709825761b7eea15a4d998a126f3396226c4f96fe2f8e4a08701d7e762f5908bd18fa15d0e88c4c90f873ebcc6701f","ssdeep":"","tlshash":"8e21608105a2b6eb97e02380198f3d5899ab004b098ced5b17ae5d49eaf84f646111f9","first_seen":"2026-07-10T08:17:19.820355Z","last_seen":"2026-07-22T10:06:55.625699Z","times_seen":22,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":54,"send":0,"wait":169,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/hero.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.117Z","timestamp":1784659375117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/hero.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:30:58 GMT\r\netag: \"310c6-6567b9602dc80\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBYGGYmBFWqCFHuP8tqOlHYhkHqyVWHkmDUULgkbOh4t2YWKPM05OMQdmECR%2Bu4wZx8EP2aFdhWMU3X3g5UPy4wKw2NAow4BNUCaShMw%2FqPGfhPKXX0qIcDMy%2BdapqucALD%2F\"}]}\r\ncontent-type: image/png\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec592679ac56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 200902\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200902,"size_decoded":201606,"mime_type":"image/png","magic":"PNG image data, 1920 x 1723, 8-bit colormap, non-interlaced","md5":"4cc29e2a70f4659a9c9a3e063c2ea23a","sha1":"2505fd4c32ea1b84e2225500af0374b7e7648f90","sha256":"2556c5492ef7420b300d785cbd030709a09b3032a45100565d800009c92dfb17","sha512":"0078736cd40db8716691c99dcacdcce4d3be25082ebd8d986ca46d75ba0441fcec9a59e44293eb204ead13e5812997c910d952bf332a6944c53564f142266c11","ssdeep":"3072:v5PbPc+wv/kDMpzhV+ZfV0IlBOsz3rODc9iAmpv0T3d1zck/JYvalk2/ShO:RDPcZUDMp1V+VVlLz3SQUqdITb8","tlshash":"fd1422b07eaf0749d28ef4ff329a14e062ce31a43d206d27205cd2f9a2d87949dc755a","first_seen":"2026-07-21T18:28:18.877137Z","last_seen":"2026-07-22T09:59:25.087053Z","times_seen":12,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/fonts/WixMadeforDisplay.ttf","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.356Z","timestamp":1784659375356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/fonts/WixMadeforDisplay.ttf HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Jul 2026 08:45:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQV84Pq7ZGm3oO3AkD%2BrknJ62pVTXHkFljqRoBW0go7%2F6h5p3yriBJhepDChWE18wfFpBlmRpPBd4%2BHZ5v9wfTb2htG%2FcHYnHkhPI5k8eBrFYmvFeWfAzQ684YV3IBR5c46n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"2229c-65629a6b82dc0\"\r\ncontent-type: font/ttf\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec5927f9dd56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139932,"size_decoded":52293,"mime_type":"font/ttf","magic":"TrueType Font data, 20 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"86f44ffcad4c77660b93f25e4afcf518","sha1":"df46cc6cc52e2687d708c1d9e5916f1ffab5bc08","sha256":"f78ac8c43268a386fbdfb28cceca39c65a275cbf59d2418a72040a1350aa2cee","sha512":"5ba62d55727d9edfa8de3d41203b38b6b1ef7f786feb746d7df79b7f4fb437d07a08426852389ce784ab4b4bbfc78d723260394126834667f3ac576d3303f3af","ssdeep":"1536:s6+uOthy35iFVpC0xTl2JD7jR7N3+MEYWBWEO/H/DknTI:ouODy0FVflm7xzaKSTI","tlshash":"f1d3c503fb52cb46d01a2f7ca5f7cb607e69a819ee16030fa09b64298d5a7b15d033d7","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-22T10:06:55.639085Z","times_seen":201,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/api/visit","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:57.821Z","timestamp":1784659377821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://ovinraherbal.com/\r\nContent-Length: 298\r\nOrigin: https://ovinraherbal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":298,"data":"{\"url\":\"https://ovinraherbal.com/\",\"path\":\"/\",\"title\":\"Best Crypto Wallet for Web3, NFTs and DeFi | Trust Security\",\"referrer\":\"\",\"language\":\"en-US\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"screen\":\"1280x1024\",\"timezone\":\"UTC\",\"theme\":\"light\"}"}},"response":{"raw":"HTTP/3 404 \r\ndate: Tue, 21 Jul 2026 18:42:57 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FDX1ljzwzeBz%2FnhFMrsPSqVHdvHp5cipZojt43XoF1sWrob5Fg4xmzb6JTDGerBa7AA%2BwCRFRZxibFZMmw05jVDEKKB8oQM3Eu3wyYN8vDerzR0f%2BIJdv7ANS9oQXghFQaOI\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1ec59375b2b56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279,"size_decoded":818,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"c672a128e4b862353c6896788d5c82af","sha1":"be2fbe5b62be10a0da03c9edf46e9a8fcc369cc0","sha256":"6de5a3a8ba6458831a41cd31468ff9d532dd76d3ffa15f7bf77e43d525465a35","sha512":"e60a7346a250d9200a527d924b2072279a88ce20ce4083c6d3f4f25f4c051cb09bf22c66a75659bee9167f847dc2714e9550c7a63441b8ff175b92bf1c5fe793","ssdeep":"","tlshash":"e4d02bde5053b38b492316503ac115c2278d12e6a43ac5e86dc6d48b529863ecd9aa9c","first_seen":"2026-07-21T18:42:30.893939Z","last_seen":"2026-07-21T18:43:35.07463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/search-icon.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.123Z","timestamp":1784659375123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/search-icon.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3X8qfmUJvFIMHiyDFJ%2BlyRmdPX5HoCxDCnDSSqWn5oM8OvIKoxonFtpZ4Bf1PkVKvRvnYITIdKWWlSGBKlfTF5Ahd40NFQkO9MLFj8MFr5LDBBsAAqvp3KaQognEY%2FyeFwH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"1fc-6567b967cee80\"\r\ncontent-type: image/svg+xml\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec592689af56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":508,"size_decoded":1007,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42368e6c71229bae298a8fc0ab4a72a4","sha1":"7db9e38f3e4cd11e6a64a1ee2d5ff075d006eb17","sha256":"932955469f290b6310967337be17d24a69485a6f0d70ebe68c9dcda7c2ae3ea0","sha512":"a72b05fcb5bd62ad94e898c494c4b14d05732207f5de5e355617f67312f6dda43bf149b0610d5a0e12428f8b98afaf62ed6b8f5f0d69e517a4532864f33c512e","ssdeep":"","tlshash":"d4f0c9aa8ba05c5c06bb9d74ea3a6dc03c0b39dc23c58299e01cfa8a0481342e08ed74","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-22T09:59:25.056535Z","times_seen":106,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/check-no.svg","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.131Z","timestamp":1784659375131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/check-no.svg HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3b2c1uJ9L9uhZyuLB7etzNHNp%2BbgL4t5YTh%2BRnouYGpvrKteomSBCeWQmhLqI3HEYgJUMImfX6hcHLf2oPGL4OF1FI%2BSgZt64VYTUbuJB5GXOQkPSH7LOVRxMHJNMRBvAnx3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"10b-6567b96b9f780\"\r\ncontent-type: image/svg+xml\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1ec592689b356b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267,"size_decoded":876,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04c4daf9379d0de94b9b42a6845c0ebd","sha1":"f14ee5a4c083cf1c97adf56d6ad47d6dc670018a","sha256":"131571d1fd6da8e1d8cf67b70be29dc4075a49413da506a39140e5478042de74","sha512":"f652f14b2a780e955898da0e6cb3c99e2431e19e853d3b63826ad439d399f1076e7c5432d7064f4a10e4a5b283d6f7dd2ed34dbbaf45b2a317d6baaf2315d06e","ssdeep":"","tlshash":"8dd02b6883eaa92cb2300468d3993454152f9045c38d105d807121369814d8bb77b1fc","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-22T09:59:25.071566Z","times_seen":90,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovinraherbal.com/assets/images/testimonial-jen.png","fqdn":"ovinraherbal.com","domain":"ovinraherbal.com","tld":"com"},"ip":{"addr":"104.21.7.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovinraherbal.com/","date":"2026-07-21T18:42:55.150Z","timestamp":1784659375150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovinraherbal.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 15:07:02 GMT","end":"Sat, 17 Oct 2026 15:07:01 GMT"},"fingerprint":{"sha1":"43:6A:78:A5:0B:71:EF:27:45:2B:E0:7F:55:37:80:5F:69:E9:60:ED","sha256":"EB:AF:E8:60:7A:96:3B:E4:68:E3:77:3B:DE:C0:94:45:00:E5:EC:6B:4E:9B:C6:63:65:52:6F:9B:19:59:FA:BF"}}},"request":{"raw":"GET /assets/images/testimonial-jen.png HTTP/1.1\r\nHost: ovinraherbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ovinraherbal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 18:42:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 10:31:47 GMT\r\netag: \"104c0-6567b98ee8ac0\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASoP%2FQmZlQ0ygzbd3RM0m0CxcQ2Gfu0%2F9JYH2YV4gzeU7QzToSW8smTjfUhs1yaAEzMGZXHoOlXORD820TSPyr3IO11fSyMKFft5RjHMgVAbFcPgk0SQ3lbp%2B5KkDc6c%2FbBE\"}]}\r\ncontent-type: image/png\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ec5926b9bf56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66752\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66752,"size_decoded":67455,"mime_type":"image/png","magic":"PNG image data, 378 x 507, 8-bit colormap, non-interlaced","md5":"92c80b6cd60e49c3366d83c259bc2a37","sha1":"d29fae7e4c41916c2d38a5a638c55df1983a29e2","sha256":"9872f68cebbc477b8141e7361f3990c2dde008c68f145717f6f21a80bd63b772","sha512":"15fe490ab564bde4af4a3c96d66da23ccde49fe9e987a92e754b9cb3889aa7a9b1d8ff9e7b0f39fb149dc3f4680881893f0087f0f6cf4e20ba794b7281728968","ssdeep":"1536:wWMdUpu5ZLUMcQ3ZAQxCRyQ3J5m1Z6cpQVrEKPA0ROQ+N373:sDIMcAZAjRyOJSZPpErfA0IN373","tlshash":"646302cdd3c1e46ec0b37211161c8259785a4d1919168ab2907e5e3feea37fd183eb21","first_seen":"2026-07-21T18:28:18.864049Z","last_seen":"2026-07-22T09:59:25.069787Z","times_seen":12,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"ovinraherbal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"ovinraherbal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}