{"report_id":"35e8f173-601f-47d9-8522-c58e0e1dec00","version":0,"status":"done","tags":[],"date":"2026-07-02T10:14:46Z","url":{"schema":"http","addr":"homeharvest.co.za/","fqdn":"homeharvest.co.za","domain":"homeharvest.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":0,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"homeharvest.co.za/","fqdn":"homeharvest.co.za","domain":"homeharvest.co.za","tld":"co.za"},"title":"homeharvest.co.za/","dom":{"size":77,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"65564788fd7669381952a7203a992f5c","sha1":"3ae0472e3af48f9bfde1ddab11a3a94f32ea4e2b","sha256":"2755440826afaa0816b8f36038828807a7e13f67044090ec1a276110743550b0","sha512":"68a8673de19a29d001fb24ed150daf1475abcba00776d8f9244838a54cf61a426ef0cc9b97f826f486f8198a8c42b7aa59d5d0a6df971753bff64571f615d02a","ssdeep":"","tlshash":"53a002aed5f7a6876c7035c54cc23e851ca5479711218d013aac2a699f0c95bdc0f299","dom_hash":"domhashdd249ecdb26b2ef262a2c5e0c46ed3eb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"homeharvest.co.za/","fqdn":"homeharvest.co.za","domain":"homeharvest.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":0,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-06T10:14:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"homeharvest.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"homeharvest.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"homeharvest.co.za","ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"domain_registered":"2023-10-03","domain_rank":0,"first_seen":"2026-04-05T23:32:56.489705Z","last_seen":"2026-05-14T11:26:54.304204Z","alert_count":6,"request_count":3,"received_data":30831,"sent_data":1504,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"homeharvest.co.za/","fqdn":"homeharvest.co.za","domain":"homeharvest.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-02T10:14:22.085Z","timestamp":1782987262085,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homeharvest.co.za","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 08:26:57 GMT","end":"Wed, 30 Sep 2026 08:26:56 GMT"},"fingerprint":{"sha1":"58:54:03:22:3B:D3:FC:B9:DE:43:E2:30:39:9E:F4:46:19:C5:E2:14","sha256":"6F:6A:67:78:1F:52:35:26:9D:DD:F8:6A:04:98:82:CA:6C:AB:E0:85:68:4A:32:38:41:E9:BF:81:18:27:02:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: homeharvest.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 02 Jul 2026 10:14:23 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/7.4.33\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":84,"size_decoded":344,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"6f306cf974ecc3dedd5d3c6848c6d40f","sha1":"13df6d9f38e7a9134ae9debb00380aafcc40510f","sha256":"b6eca5e5273be929bd503a2933bc87afeb54fc83a7d878bdbf585b795a46ec02","sha512":"0db273879b6978eb94c33e695ae31f7ec8da0fa048d1fbc7896c96be185b9cae9c6fe6bc69225212c274130e2e02adbbcb44a84dbec663e1e04e8a3972585cd2","ssdeep":"","tlshash":"e2a011a8c0f28a820820208008c22a820ca2038b0200080a328c23ab8f0888a888f08a","first_seen":"2026-04-30T14:40:53.836337Z","last_seen":"2026-07-02T10:14:47.979443Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1684,"timings":{"blocked":-1,"dns":941,"connect":158,"send":0,"wait":255,"receive":7,"ssl":322},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"homeharvest.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"homeharvest.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeharvest.co.za/uc.jpg","fqdn":"homeharvest.co.za","domain":"homeharvest.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homeharvest.co.za/","date":"2026-07-02T10:14:24.016Z","timestamp":1782987264016,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homeharvest.co.za","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 08:26:57 GMT","end":"Wed, 30 Sep 2026 08:26:56 GMT"},"fingerprint":{"sha1":"58:54:03:22:3B:D3:FC:B9:DE:43:E2:30:39:9E:F4:46:19:C5:E2:14","sha256":"6F:6A:67:78:1F:52:35:26:9D:DD:F8:6A:04:98:82:CA:6C:AB:E0:85:68:4A:32:38:41:E9:BF:81:18:27:02:70"}}},"request":{"raw":"GET /uc.jpg HTTP/1.1\r\nHost: homeharvest.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homeharvest.co.za/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 02 Jul 2026 10:14:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 Aug 2024 18:45:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 29678\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29678,"size_decoded":29922,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 691x400, components 3","md5":"4127f4e476a54212cdda7068d9908e0a","sha1":"1046be745ecf6de077be0fb466d3113b03dcd26b","sha256":"7e7a09ab235a5970c78fb71d2285682b65420e7fe2ab1747b64e6a9295c4d5c3","sha512":"16c7b6f9ba147fec72782b546e56eba548528249adb62fd874e7dc06b36393a12ba74740c058bd6b5af1372eb228fa75ce5b04e1cad4dcdc391c2e4e11e16faa","ssdeep":"768:MHaZiaS+OTkFZmV67pEbngZUAb+SboYTgH:M3aATkFZmV67CngZRiFYT+","tlshash":"c1d2d05722108c29eb0b12fe0d78183e59b32c6d3e0dd37eda596b9b540fdb2c618d12","first_seen":"2026-04-30T14:40:53.837416Z","last_seen":"2026-07-02T10:14:47.98329Z","times_seen":3,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"homeharvest.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"homeharvest.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeharvest.co.za/favicon.ico","fqdn":"homeharvest.co.za","domain":"homeharvest.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homeharvest.co.za/","date":"2026-07-02T10:14:24.115Z","timestamp":1782987264115,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homeharvest.co.za","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 08:26:57 GMT","end":"Wed, 30 Sep 2026 08:26:56 GMT"},"fingerprint":{"sha1":"58:54:03:22:3B:D3:FC:B9:DE:43:E2:30:39:9E:F4:46:19:C5:E2:14","sha256":"6F:6A:67:78:1F:52:35:26:9D:DD:F8:6A:04:98:82:CA:6C:AB:E0:85:68:4A:32:38:41:E9:BF:81:18:27:02:70"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: homeharvest.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homeharvest.co.za/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Thu, 02 Jul 2026 10:14:24 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":556,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-07-26T04:29:35.178609Z","times_seen":47172,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":0,"dns":0,"connect":158,"send":0,"wait":166,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"homeharvest.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"homeharvest.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}