# PhishDestroy domain threat record: africantraditionalhealing.co.za Content language: English Canonical HTML report: https://phishdestroy.io/domain/africantraditionalhealing.co.za/ Machine-readable companion: https://phishdestroy.io/domain/africantraditionalhealing.co.za/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-20 13:45:25 UTC - Last availability or vendor check: 2026-10-22 10:00:16 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 14/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: wordpress ## Stored infrastructure - Observed IP address: 41.185.114.14 - Registrar in stored WHOIS data: 1-Grid - Last stored HTTP status: 403 - Registration date in stored WHOIS data: 2024-08-28 10:54:14 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1599b-033f-729d-acaa-11cf8033157e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/africantraditionalhealing.co.za - Certificate Transparency search: https://crt.sh/?q=%25.africantraditionalhealing.co.za - Web Archive lookup: https://web.archive.org/web/*/https://africantraditionalhealing.co.za/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s automated assessment classifies the site as an impersonation phishing page. The recorded page title is “Front Page - Ancient African Healing”. The domain was first observed by PhishDestroy on 2026-10-20. How the scam works Impersonation phishing pages mimic legitimate sites or brands to trick visitors into entering credentials, personal data, or other sensitive information. Attackers host a look‑alike page and rely on deceptive URLs, branding or content to lure victims. Collected data can be used for account takeover, identity theft, or resale on underground markets. Evidence VirusTotal scanned the domain on 2026-10-20 and reported 14 detections out of 92 engines, with vendors such as BitDefender, Fortinet and G‑Data flagging it. Google Safe Browsing checked on 2026-10-20 did not flag the URL. PhishDestroy’s internal blocklist includes the domain as of 2026-10-20. External checks found no listings on Spamhaus DBL or other public blocklists on that date. OTX recorded four pulses mentioning the domain on 2026-10-20, indicating community awareness but not a direct malicious verdict. Infrastructure The recorded IP address is 41.185.114.14, which belongs to AS36943 1 GRID (PTY) LTD in South Africa. The site presented a Let’s Encrypt / YR1 certificate when checked on 2026-10-20. What to do Anyone who may have entered login details should change those credentials on the legitimate service and enable multi‑factor authentication. Do not click links to the domain; if encountered, report the URL to the impersonated organization. Security teams should add the exact domain to web‑filter block lists and review any outbound connections to the recorded IP. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1599b-033f-729d-acaa-11cf8033157e/ VirusTotal report: https://www.virustotal.com/gui/domain/africantraditionalhealing.co.za Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=africantraditionalhealing.co.za Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-20 16:20:14 UTC ## Stored page captures - Primary capture: https://i.ibb.co/hRTjp567/ea372eaedaef.png Captured: 2026-10-20 13:59:53 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a1599b-033f-729d-acaa-11cf8033157e.png Captured: 2026-10-20 13:59:53 UTC Source report: https://urlscan.io/result/01a1599b-033f-729d-acaa-11cf8033157e/ - URLScan capture 2: https://urlscan.io/screenshots/01a090b6-26d9-7227-87f6-a1891ae3ecc3.png Captured: 2026-10-20 13:45:25 UTC Source report: https://urlscan.io/result/01a1599b-033f-729d-acaa-11cf8033157e/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/debaa4f9-dd7d-40f9-9b86-980d4caefa61.png Captured: 2026-10-20 13:47:05 UTC Source report: https://radar.cloudflare.com/scan/debaa4f9-dd7d-40f9-9b86-980d4caefa61 SHA-256: a0ec7cf69cf2a116727df4e1983517b78417d5dfa0cbe213b780f76c38bdf19d - URLQuery: https://screenshots.phishdestroy.io/uq/b03bdb12-d2f8-4fdd-945f-1905d9077be8.png Source report: https://urlquery.net/report/b03bdb12-d2f8-4fdd-945f-1905d9077be8 SHA-256: 7edf33fcf0a4766c389e4c633fe5e1e1e9c39924ccc1563bbe1e7e648015d16e - URLScan · 2026-09-11: https://screenshots.phishdestroy.io/us/01a09098-5927-72d2-b9a0-5d8f5f03644a.png Captured: 2026-09-11 13:11:45 UTC Source report: https://urlscan.io/result/01a09098-5927-72d2-b9a0-5d8f5f03644a/ SHA-256: bc4cf42878c51aca25ac6cf60ac820a394df8bee3c3584766193dea0672b9b9b - URLScan · 2026-09-11: https://screenshots.phishdestroy.io/us/01a09098-2e97-779b-bcae-c11dbec90b27.png Captured: 2026-09-11 13:11:52 UTC Source report: https://urlscan.io/result/01a09098-2e97-779b-bcae-c11dbec90b27/ SHA-256: e3956d6ceeed23698e09a1d7e5731962a123ab91b7103d8e73dafb72098a2836 - URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a159bb-b44e-73d9-98fc-a67f8b514475.png Captured: 2026-10-20 14:34:07 UTC Source report: https://urlscan.io/result/01a159bb-b44e-73d9-98fc-a67f8b514475/ SHA-256: a6371206795f0f34691048e072d6696798503199cd6aaa0cd185360643ef9194 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-20T16:42:04Z", "uuid": "01a1599b-033f-729d-acaa-11cf8033157e", "scanned_at": "2026-10-20T13:58:28Z", "final_url": "https://africantraditionalhealing.co.za/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://africantraditionalhealing.co.za/", "from": "http://africantraditionalhealing.co.za/", "status": 307 }, { "to": "http://africantraditionalhealing.co.za/", "from": "https://africantraditionalhealing.co.za/", "status": 307 }, { "to": "https://africantraditionalhealing.co.za/", "from": "http://africantraditionalhealing.co.za/", "status": 301 } ], "ip": "41.185.114.14", "ptr": "lnxsvrweb05.hostserv.co.za", "ips": [ "41.185.114.14" ], "asns": [ "36943" ], "countries": [ "ZA" ], "link_domains": [ "maps.google.com", "www.twitter.com", "colibriwp.com" ], "social": [ "https://www.twitter.com" ], "doc_hash": "655caece8a50c2b08f40e2a4ca755d4bab4b846fdcaa0671c62b49028453f810", "script_hashes": [ "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89", "b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1", "e00add38134eac2fb8e8e9c09cbfff7bbe57952b210322eb2eecb0a21fc055eb", "4b6e293c2a53c4fbbdba75cbecd53bf41c249135621d102d4396b239010b546e", "26c4fe0a3cae9bbdf0723ac77a504817392cb6df3cd05435a36645ffc750c1bd", "50756c1bbf3f2f533692245619e8299435a15e374ee9bf9adce00121dbbb3ce5", "94e7643805aa5ef5f0dd1fb032bdfb4abfffa4432d26006f8bb95876e9deee4b", "c6e72caf2dad7af853e600612455e4c8e90abe9cbc0a5b144cb8b5022044c9f9", "d3c66e7fec724ce2e33fbbae8dc0f679c09a6d619229500575df05deabc9e9d6", "ba66d3685c4fdf516fe8ed62b692d2ff7fafe5f3805832ce533966bce19a295e" ], "globals": [ "litespeed_docref", "EvEmitter", "imagesLoaded", "jQueryBridget", "getSize", "matchesSelector", "fizzyUIUtils", "Outlayer", "Masonry", "Typed", "Mailcheck", "punycode", "WPForms", "wpforms_settings", "lazyLoadOptions", "LazyLoad", "urlCreator", "litespeed_load_delayed_js_force", "litespeed_load_delayed_js", "litespeed_load_one", "litespeed_inline2src", "litespeed_ui_events", "litespeed_vary", "ht_ctc_chat_var", "ht_ctc_variables", "syncChatwayData" ], "tls": { "san": [ "africantraditionalhealing.co.za", "mail.africantraditionalhealing.co.za", "webmail.africantraditionalhealing.co.za", "www.africantraditionalhealing.co.za" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "africantraditionalhealing.co.za", "protocol": "TLS 1.3", "valid_to": "2026-12-06T11:43:51Z", "valid_from": "2026-09-07T11:43:52Z" }, "domain_age_days": 1934, "apex_age_days": 1934, "tls_age_days": 43, "tls_valid_days": 89, "requests": 26, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 64, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "BitNinja-WafPro", "content-type": "text/html; charset=UTF-8", "x-powered-by": "BitNinja\nBitNinja", "permissions-policy": "private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuanc" } }, "cf": { "v": 1, "fetched_at": "2026-10-20T17:54:50Z", "uuid": "debaa4f9-dd7d-40f9-9b86-980d4caefa61", "scanned_at": "2026-10-20T13:47:05Z", "final_url": "https://africantraditionalhealing.co.za/", "status": 200, "history": [ { "url": "https://africantraditionalhealing.co.za/", "status": 200 }, { "url": "https://africantraditionalhealing.co.za/", "status": 200 } ], "dom_hash": "f14ca71cfd96085bdac65669c0c6ba4cca9b81fb0855fb824c90b10fa890fbc3", "doc_hash": "0bfe9a136422d1d3fd746edca2c0d4c6764784984d73728f366b4df6921af0b9", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "africantraditionalhealing.co.za", "type": "A", "value": "41.185.114.14" } ], "dnssec_valid": false, "ip": "41.185.114.14", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "1-Grid", "created": "2024-08-28T12:54:14Z", "updated": "2026-08-23T18:53:14Z", "expires": "2027-08-28T12:54:14Z", "nameservers": [ "thor.ns.1-grid.co.za", "thor.ns.1-grid.com", "thor.ns.1-grid.co.uk", "thor.ns.1-grid.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-20T18:04:38Z", "analysis_at": "2026-10-20T14:24:11Z", "stats": { "timeout": 0, "harmless": 48, "malicious": 13, "suspicious": 1, "undetected": 30 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "URLQuery": "malicious", "Kaspersky": "phishing", "Gridinsoft": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing" }, "reputation": 0, "registrar": "1-Grid", "created": "2024-08-28T12:54:14Z", "expires": "2027-08-28T12:54:14Z", "updated": "2026-08-23T18:53:14Z", "first_seen": "2025-02-03T05:29:15Z", "dns": [ { "ttl": 1800, "type": "NS", "value": "thor.ns.1-grid.co.uk" }, { "ttl": 1800, "type": "TXT", "value": "v=spf1 ip4:41.185.114.14 include:relay.mailchannels.net ~all" }, { "ttl": 1800, "type": "NS", "value": "thor.ns.1-grid.net" }, { "ttl": 1800, "type": "NS", "value": "thor.ns.1-grid.co.za" }, { "ttl": 1800, "type": "MX", "value": "mail.africantraditionalhealing.co.za", "priority": 10 }, { "ttl": 1800, "type": "MX", "value": "1-grid-mx01.co.za", "priority": 5 }, { "ttl": 1800, "type": "MX", "value": "1-grid-mx03.co.za", "priority": 5 }, { "ttl": 1800, "type": "NS", "value": "thor.ns.1-grid.com" }, { "ttl": 1800, "type": "SOA", "rname": "sudhirhealingsolutions.gmail.com", "value": "thor.ns.1-grid.com" }, { "ttl": 1800, "type": "A", "value": "41.185.114.14" }, { "ttl": 1800, "type": "MX", "value": "1-grid-mx04.com", "priority": 5 }, { "ttl": 1800, "type": "MX", "value": "1-grid-mx02.com", "priority": 5 } ], "dns_at": "2026-10-20T14:29:37Z", "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb", "cert": { "san": [ "africantraditionalhealing.co.za", "mail.africantraditionalhealing.co.za", "webmail.africantraditionalhealing.co.za", "www.africantraditionalhealing.co.za" ], "issuer": "Let's Encrypt / YR1", "serial": "6cd143e3578ec38800e8ba9f9612b2e6f6d", "sha256": "879efb84f17f29330bf39f5d2cabe7ef42fac95a72a8ff78c7f1fc6c1cab3423", "subject": "africantraditionalhealing.co.za", "valid_to": "2026-12-06T11:43:51Z", "valid_from": "2026-09-07T11:43:52Z" }, "whois": { "registrar": "1-Grid", "registrar_url": "https://1-grid.com/", "created": "2024-08-28T12:54:14Z", "updated": "2026-08-23T18:53:14Z", "expires": "2027-08-28T12:54:14Z", "status": [ "ok" ], "nameservers": [ "thor.ns.1-grid.co.uk", "thor.ns.1-grid.co.za", "thor.ns.1-grid.com", "thor.ns.1-grid.net" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T02:05:30Z", "mail_config": { "mx": [ "1-grid-mx01.co.za", "1-grid-mx03.co.za", "mail.africantraditionalhealing.co.za", "1-grid-mx02.com", "1-grid-mx04.com" ], "spf": "v=spf1 ip4:41.185.114.14 include:relay.mailchannels.net ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 1 }, "caa_records": { "domain": "africantraditionalhealing.co.za" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-20T13:46:45Z", "first": "2010-05-10T01:55:07Z", "changes": 7, "days_archived": 8, "scans_per_day": 0, "avg_page_bytes": 11164 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://africantraditionalhealing.co.za/sitemap_index.xml" ] }, "social_tags": { "ogUrl": "https://africantraditionalhealing.co.za/", "title": "Front Page - Ancient African Healing", "ogType": "website", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "ogTitle": "Front Page - Ancient African Healing", "generator": "WordPress 7.1.3", "ogSiteName": "Ancient African Healing", "twitterCard": "summary_large_image", "canonicalUrl": "https://africantraditionalhealing.co.za/", "ogDescription": "Dr. Shabil: The Ancient African Healer. +27 83 546 4280 info@africantraditionalhealing.co.za A seasoned Ancient African Healer and Spiritualist, harnessing the profound power of age-old African rituals to aid you in conquering your love and relationship tribulations, as well as any other obstacles h" }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 950, "tls": 153, "wait": 25993, "connect": 149, "download": 473 }, "response_ms": 27718 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 22, 25, 53, 80, 110, 143, 443, 587, 993, 995, 5060 ] }, "dns_server": { "ns": [ { "ip": "41.61.100.12", "host": "thor.ns.1-grid.com" }, { "ip": "41.61.100.12", "host": "thor.ns.1-grid.co.uk" }, { "ip": "196.43.195.12", "host": "thor.ns.1-grid.co.za" }, { "ip": "196.43.195.12", "host": "thor.ns.1-grid.net" } ], "zone": "africantraditionalhealing.co.za" }, "cookies": { "cookies": [ { "name": "bn_challenge_session", "http_only": true, "same_site": "Lax" }, { "name": "_ga" }, { "name": "_ga_M2RCV3G3BZ" } ] }, "location": { "ip": "41.185.114.14", "asn": "36943", "org": "1 GRID (PTY) LTD", "city": "Cape Town", "country": "ZA" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "africantraditionalhealing.co.za" }, "dns": { "A": [ "41.185.114.14" ], "MX": [ "{\"exchange\": \"1-grid-mx04.com\", \"priority\": 5}", "{\"exchange\": \"1-grid-mx01.co.za\", \"priority\": 5}", "{\"exchange\": \"mail.africantraditionalhealing.co.za\", \"priority\": 10}", "{\"exchange\": \"1-grid-mx03.co.za\", \"priority\": 5}", "{\"exchange\": \"1-grid-mx02.com\", \"priority\": 5}" ], "NS": [ "thor.ns.1-grid.com", "thor.ns.1-grid.net", "thor.ns.1-grid.co.za", "thor.ns.1-grid.co.uk" ], "SOA": "{\"nsname\": \"thor.ns.1-grid.com\", \"hostmaster\": \"sudhirhealingsolutions.gmail.com\", \"serial\": 2026090701, \"refresh\": 10800, \"retry\": 3600, \"expire\": 1209600, \"minttl\": 10800}", "TXT": [ "v=spf1 ip4:41.185.114.14 include:relay.mailchannels.net ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": "private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https:/", "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "41.185.114.14", "family": 4 }, "tech_stack": { "technologies": [ "WordPress", "Joomla", "MySQL", "PHP", "Google Analytics", "HTTP/3" ] }, "headers": { "headers": { "server": "Caddy, BitNinja Captcha Server", "content-type": "text/html", "content-security-policy": "base-uri 'none'; object-src 'none'; frame-ancestors 'none'", "x-frame-options": "DENY", "x-content-type-options": "nosniff" } } } } ```