ovinraherbal[.]com

Analysis of ovinraherbal.com indicates that the domain was registered on October 14, 2025 through Porkbun LLC and is currently resolving to the IP address 188.114.96.3. The authoritative nameservers listed are jonah.ns.cloudflare.com and molly.ns.cloudflare.com, confirming that the infrastructure is hosted behind Cloudflare's network. VirusTotal scans show that 2 of 95 security vendors have flagged the domain, suggesting limited but notable detection across the threat‑intelligence ecosystem.

The domain is listed on one external security blocklist and has been actively blocked by the PhishDestroy service, reinforcing its classification as a high‑risk phishing vector. No publicly available data on SSL certificate details, HTTP response codes, or page title have been disclosed, leaving the exact content and delivery mechanisms of the site unobserved. Defenders should prioritize immediate DNS or firewall blocking of both the domain name and its resolved IP address 188.114.96.3, and consider adding the domain to internal threat‑intel feeds to ensure coverage across endpoint and web‑gateway controls.

Continuous monitoring of the associated Cloudflare nameservers is advised, as changes may indicate migration to new hosting or additional malicious payloads. Given the limited detection count, supplementary scanning of the domain with internal sandbox environments is recommended to uncover any payloads or credential‑harvesting forms that have not yet been captured by external scanners. Organizations should also update any URL filtering policies to reference the current blocklist entry and verify that existing anti‑phishing tools, such as PhishDestroy, remain active for this indicator.