{"report_id":"1867e278-53d4-4856-97c7-1547563dcd96","version":0,"status":"done","tags":[],"date":"2026-07-03T11:26:45Z","url":{"schema":"https","addr":"avanteshipping.com/wp-includes/collaboration/easyap","fqdn":"avanteshipping.com","domain":"avanteshipping.com","tld":"com"},"ip":{"addr":"45.60.22.63","port":0,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"avanteshipping.com/wp-includes/collaboration/easyap","fqdn":"avanteshipping.com","domain":"avanteshipping.com","tld":"com"},"title":"503 Error","dom":{"size":727,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"02621b8acaf524fbcfa773429fedad7f","sha1":"a01650179664f5a56e522f8744a8d67be6f93943","sha256":"6d7a707cf85208960957e321e2295e13ebad3c5e03da2a1d4543f6dea3d85d8e","sha512":"d0cd0a9f58a3ddb90474f6194af7671dcaf60aa4436d28274a5742033b1d3c781deb83312494ef2003fbec7d1a098a8153c9d4a406249a34937f92e56ac10d5e","ssdeep":"","tlshash":"68019403c040381af033872aa4c3f2186304e848124b6db07dcd69aa8ec8f21e7c7bcc","dom_hash":"domhashe8150bacfcdcec57b3b6e0316f556de4","first_seen":"2025-10-28T10:39:59.792046Z","last_seen":"2026-08-05T03:47:12.47442Z","times_seen":522,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"avanteshipping.com/wp-includes/collaboration/easyap","fqdn":"avanteshipping.com","domain":"avanteshipping.com","tld":"com"},"ip":{"addr":"45.60.22.63","port":0,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-07T11:26:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"avanteshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"avanteshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"avanteshipping.com","ip":{"addr":"45.60.22.63","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-17T11:17:20.309501Z","last_seen":"2026-07-01T19:17:18.897099Z","alert_count":4,"request_count":2,"received_data":2500,"sent_data":1237,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"avanteshipping.com/wp-includes/collaboration/easyap","fqdn":"avanteshipping.com","domain":"avanteshipping.com","tld":"com"},"ip":{"addr":"45.60.22.63","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-03T11:26:13.233Z","timestamp":1783077973233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imperva.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 14 Feb 2026 02:55:00 GMT","end":"Thu, 13 Aug 2026 02:55:00 GMT"},"fingerprint":{"sha1":"7D:23:FA:00:7F:0D:41:CF:68:46:0B:05:2A:9A:50:D6:AE:40:D2:58","sha256":"9D:99:DE:6A:7E:D9:C7:CE:F1:92:32:91:9F:03:37:A3:42:7E:A1:B2:82:E9:58:49:60:F9:0A:E8:12:32:65:F5"}}},"request":{"raw":"GET /wp-includes/collaboration/easyap HTTP/1.1\r\nHost: avanteshipping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 503 \r\ndate: Fri, 03 Jul 2026 11:26:27 GMT\r\nserver: Apache\r\nlast-modified: Thu, 26 Feb 2026 00:36:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 465\r\ncontent-type: text/html\r\nset-cookie: visid_incap_3263672=Ka20JGbYSg+k9T2KJlPVwmOcR2oAAAAAQUIPAAAAAABYf4bc771py5xUMe/eFM1w; expires=Sat, 03 Jul 2027 07:03:31 GMT; HttpOnly; path=/; Domain=.avanteshipping.com\nincap_ses_159_3263672=8vqiTAJ1tH+PNlGxRuI0AmOcR2oAAAAAmeRhwstf3bkmBlVo80Rs3A==; path=/; Domain=.avanteshipping.com\r\nx-cdn: Imperva\r\nx-iinfo: 18-38287179-38287197 NNNY CT(61 69 0) RT(1783077987644 95) q(0 0 0 0) r(0 1) U11\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":744,"size_decoded":1119,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"6c0c8c7419309ef3c3023f2f7f5489bf","sha1":"e41ce0dbe01fc1395d252c476a318e4f4d36048d","sha256":"8282022ff4ef77aef97428899e3975bd49ef85265e5f26cac244777b5c090764","sha512":"b0fa8d7c2e35707630769849dd065f0894467eef46ca59f9bf8fb22c554b0ed9d423b949a96cdd253a2fcb23a3273a50e3240276e7a1ca98e6e6ca1cb5f5a236","ssdeep":"","tlshash":"92016547c0403815e1338629a5c3f2186315e944128b6d703ece696a8ec8f21a6db7cc","first_seen":"2023-05-12T21:15:51Z","last_seen":"2026-08-05T03:47:12.475179Z","times_seen":1160,"resource_available":true,"data":null}},"time_used":28901,"timings":{"blocked":-1,"dns":14285,"connect":14365,"send":0,"wait":156,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"avanteshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"avanteshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avanteshipping.com/favicon.ico","fqdn":"avanteshipping.com","domain":"avanteshipping.com","tld":"com"},"ip":{"addr":"45.60.22.63","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avanteshipping.com/wp-includes/collaboration/easyap","date":"2026-07-03T11:26:28.212Z","timestamp":1783077988212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imperva.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 14 Feb 2026 02:55:00 GMT","end":"Thu, 13 Aug 2026 02:55:00 GMT"},"fingerprint":{"sha1":"7D:23:FA:00:7F:0D:41:CF:68:46:0B:05:2A:9A:50:D6:AE:40:D2:58","sha256":"9D:99:DE:6A:7E:D9:C7:CE:F1:92:32:91:9F:03:37:A3:42:7E:A1:B2:82:E9:58:49:60:F9:0A:E8:12:32:65:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: avanteshipping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avanteshipping.com/wp-includes/collaboration/easyap\r\nCookie: visid_incap_3263672=Ka20JGbYSg+k9T2KJlPVwmOcR2oAAAAAQUIPAAAAAABYf4bc771py5xUMe/eFM1w; incap_ses_159_3263672=8vqiTAJ1tH+PNlGxRuI0AmOcR2oAAAAAmeRhwstf3bkmBlVo80Rs3A==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 503 \r\ndate: Fri, 03 Jul 2026 11:26:28 GMT\r\nserver: Apache\r\nlast-modified: Thu, 26 Feb 2026 00:36:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 465\r\ncontent-type: text/html\r\nx-cdn: Imperva\r\nx-iinfo: 18-38287179-38287307 NNNY CT(61 68 0) RT(1783077987644 708) q(0 0 0 -1) r(1 1) U11\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":744,"size_decoded":823,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"6c0c8c7419309ef3c3023f2f7f5489bf","sha1":"e41ce0dbe01fc1395d252c476a318e4f4d36048d","sha256":"8282022ff4ef77aef97428899e3975bd49ef85265e5f26cac244777b5c090764","sha512":"b0fa8d7c2e35707630769849dd065f0894467eef46ca59f9bf8fb22c554b0ed9d423b949a96cdd253a2fcb23a3273a50e3240276e7a1ca98e6e6ca1cb5f5a236","ssdeep":"","tlshash":"92016547c0403815e1338629a5c3f2186315e944128b6d703ece696a8ec8f21a6db7cc","first_seen":"2023-05-12T21:15:51Z","last_seen":"2026-08-05T03:47:12.475179Z","times_seen":1160,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"avanteshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"avanteshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}