{"report_id":"a0027f3a-9f13-47d4-9910-e5dc79a3f165","version":6,"status":"done","tags":[],"date":"2026-03-24T13:17:07Z","url":{"schema":"http","addr":"getsupport-alert-location.click/aU3VJ0FM?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"title":"Find Devices — Apple iCloud","dom":{"size":17014,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3552)","md5":"cd76e801248c49ea5b2a893fe5bb2780","sha1":"c94f5bf22a7c1f322d51d582f7ae4f0c9d266530","sha256":"55528369f1066da6a84e597da5912f2aea508fe6ad97973ce27209f76e338460","sha512":"ef62d5fe64866365c8cd4f033c92de3fe3f9ce3b7a65b5462c36a93bea742b11220dda20d3ce80374498a7c462dfad42ba0c742e7f939c4c7f97196846d8ed28","ssdeep":"384:fRdLXhFcavSv5HdC+oqp29uX1hIiqa2WkKGDpN+YQjUvu:TvmLoqp2UX1aieWSNAjUvu","tlshash":"e17208a102f09665624381d6fea02a28bf22d107ed8ad580b5af4ba44fe3d85c517e3d","dom_hash":"domhashb67b4aed83abe5f2b2e394224245ec36","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"getsupport-alert-location.click/aU3VJ0FM?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T13:17:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"getsupport-alert-location.click","ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2026-02-17","domain_rank":0,"first_seen":"2026-03-24T12:32:08.156259Z","last_seen":"2026-03-24T12:32:08.156259Z","alert_count":30,"request_count":15,"received_data":2203845,"sent_data":10999,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.icloud.com","ip":{"addr":"2.20.166.31","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-01-15","domain_rank":8674,"first_seen":"2012-07-01T18:35:11Z","last_seen":"2026-03-20T03:18:50.445061Z","alert_count":0,"request_count":4,"received_data":3483,"sent_data":1985,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/js/6.main.js","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"465ddf7acab86aa7e6b2865cac3e6ca8","sha1":"363e5b71ebea69776cc0bcf9d478309356173bec","sha256":"b9da11c070e62fe1b27482a11a53206799d7862966a1242cf5c1eceb33ed9ac4","sha512":"0b325d2e8a44d5ea828b7f54a882fd7ae81e0e6b39afdc25484678bc4105cade0627e803327b86499cbc261b69fa0bdf8b1a96ae308715d2339c5ca4e2c89c21","ssdeep":"1536:R6Zi1zXyeShUKduObhyu4Zc8rZsDw12SzjSr9wdU6NLpnNoWAZ0ZXG:nVIhIDbW","tlshash":"10c31acdf691f09243a761f9907f210ff37a685cb41ca460e245d5c9bcaa40e932bf69","size":123413,"data":"","first_seen":"2025-12-10T09:38:23.387213Z","last_seen":"2026-04-20T21:36:39.576211Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/js/2.main.js","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"deae935f339e6bdde0c6a3fd46025baa","sha1":"20ee661a3d1af22cef68f815bad1ee6d280be018","sha256":"51ef64ff3f7262761ee8f92fcb93b652d08ef60d5b387b2a882852df6a58c72e","sha512":"7ab9fa46a6ce7b804d185db9937a85003e5db6d275500f80f127a78c45b84d276d3e06cecbfd042c60ea2e700be74dab6268fc65bb81bc4a326f987fa79387a2","ssdeep":"3072:ch31sIRhaEI84E/FACVvGC8ZdEXkbugnMyeN3M4jYxeD2av39Ss:w31sIwEIq/FACVv3CupYxQ2+NSs","tlshash":"b334e8957a51e59c91eb02dba83e4928f6243f08f938d810a4e5cdcd796cbc4753ba33","size":239651,"data":"","first_seen":"2025-12-10T09:38:23.393926Z","last_seen":"2026-04-20T21:36:39.578184Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/js/custom.js","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6466156de25b49a993d6d7ec8b59c714","sha1":"cdb535f06a75a2bd9af4665a63f3aa87f8103155","sha256":"e37eef55db2b7b938a7abc30cf28e143a07a6cbe688a622b138f79c9a427394b","sha512":"db83dc9e6b4daecfa4b44155951329020356bcc5dc85ca3fee4d222076a54cc8dbb1c6e17977a5c26d16f6251e9af1c8c5551ce54156501aaff4c8a51c8985b5","ssdeep":"96:s8cXOgqHjiLcDD+3/Ljj0eCZUyQ1NMmvpec7JE4v:s8ngwjiLGiPXAU31Ndv0cz","tlshash":"cbc1611922220831a57313fdbbe24245fe16487365c0a2a53cacce481fb1a5557fafee","size":5696,"data":"","first_seen":"2026-03-15T22:02:29.70282Z","last_seen":"2026-04-20T21:36:39.600862Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"84d6e7c2f082f71ba6db6e707b07c705","sha1":"cea1112864f9331d94ccfb87d8093438432063fc","sha256":"c6c6b00451ad33c6adcbed080c5d18249ea01d6ee44b8b75cdf5e368ad831d66","sha512":"6882e74df4f7e36164cdbcbaa95af5ed77dbacf9a5805bd0e8118e555c2f58d718819f7e54b3ea620fb255ac9da60d3d9a54981448b39b8ad4a033365642df18","ssdeep":"","tlshash":"c5210f5457ecb85325382092790f25f8937ea367be00c24a9e2cd5607bddc319b2e8f9","size":1256,"data":"","first_seen":"2026-02-22T21:25:31.495871Z","last_seen":"2026-04-20T12:15:03.838991Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T13:16:45.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie= HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Tue, 24 Mar 2026 13:16:45 GMT\r\nServer: Apache\r\nLocation: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nContent-Length: 469\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17080,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T03:09:26.162185Z","times_seen":14042685,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":239,"dns":1,"connect":116,"send":0,"wait":119,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T13:16:45.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie= HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:45 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb; path=/\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":17080,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3552), with CRLF, LF line terminators","md5":"2828e19f9523e52b42397b7f1bb59d11","sha1":"265c32b7a731d13acad8c65f6a5fa48929c0bd33","sha256":"1e54506e7c0494a6d3695664f16e7011b2ecbd172e19df5946b95dc779189db3","sha512":"80aa9cd52cb1624b2c73406944e18f5e52c689ae9924bfb65a5aed7820f2f4326207d934e6c89e7ddcf921fdaa7768ae7b2768f900cc5865bb0c9263e236ef63","ssdeep":"384:hRdLXhFcavSv5HdC+oqp29uX1hIipJSgsqYmN8YQeUvG:FvmLoqp2UX1aipJSgbl6eUvG","tlshash":"63721a9112e196656243c1d7fea06a28ff12d107dd8bd580b6af4ba55fe3e81c813e3c","first_seen":"2026-03-23T12:40:51.387809Z","last_seen":"2026-04-20T12:15:03.823608Z","times_seen":40,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/fonts/SF-Pro-Display/v3/sf-pro-display_regular.woff2","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/fonts/SF-Pro-Display/v3/sf-pro-display_regular.woff2 HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Dec 2025 00:09:02 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 117056\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":117056,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 117056, version 1.0","md5":"86fd2ee9d4d410f95a501f45d2a4defe","sha1":"02579d7791d9a8149f1c9734eb0c6e1d0384074f","sha256":"53aeca952cf8dfa4e64e54956d4a8b6fcf75a9b75a4c41b2fa24de75334761a4","sha512":"d5324901357a818cbcbff2fae20402acabd754b78e290c5494e48c127e889af8e8eb0a00b6ae40c51f8f03627f71b90f7551468a7e19937df1707ce211215ad8","ssdeep":"3072:fsVBqpO7mU0bsA+oLAbzDrN2vCEkTm23DY:fs2pO7mUcvjyh2annDY","tlshash":"0fb312904c8e5f29e5d523fd2c1e561002463ec731f7e826d9f9dda1c6a8a30dd3a963","first_seen":"2024-10-26T16:56:26.206143Z","last_seen":"2026-04-22T03:08:05.85821Z","times_seen":8285,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":219,"dns":1,"connect":112,"send":0,"wait":115,"receive":335,"ssl":116},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/css/6.main.css","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/css/6.main.css HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:46 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 Dec 2025 06:25:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5663\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5663,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5663), with no line terminators","md5":"f48af9d821b561e02ee6da0561adb9b8","sha1":"5968df082caef978398ceb9ae8cac4add6da4f51","sha256":"98d0f67d1555bef9535afe657207f47c397068a51fc02e71e32d0bd69e9bb4d0","sha512":"6a9ca31176ce64d47d0e95cb4c815781974fbd8608fda7e2bf9ecc6dce06daa5f88872c6b6f21b2bccd7c7d814d5bfbe1fa6f0a33239bb21efa71908ec87fec3","ssdeep":"48:D5X5mHEvv2kh/3gmvb2cg96Sa8VTno2G++Zu2OiYjbDjBmpP:D5X5+SuD+SjbDjS","tlshash":"00c175297cd17300fdfa496c70a13ae1b502b51d910e49fdca87b305df8a59f0a69a1f","first_seen":"2025-04-19T17:11:49.895713Z","last_seen":"2026-04-21T20:15:52.624062Z","times_seen":431,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":230,"dns":1,"connect":120,"send":0,"wait":120,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/css/2.main.css","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/css/2.main.css HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:46 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 Dec 2025 06:25:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 304690\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":304690,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f16a6c6faf85bacaa38fde2fe856e86e","sha1":"7adb28acaab659d9b82ed8fa71f31f3aac64dc82","sha256":"904dc16b71f575d3de5db1f780937d3e69ce53fc9f4749ed685214b9a2879821","sha512":"44801bddc9a325e435114c404716aacdc15fe6b713c3aed45793b2a56ae5745579f667ffe58f91e291514e50946fb9c7557ff82b089375214373a457cb4b7b4d","ssdeep":"1536:4iZp/6VioC8DSJmCDdXdEHBHQnE6OK9DSJ8whC60GWc0VXfeHLbRhk1f4Mqkw:896OB","tlshash":"8c54985b5820332cbeb78d31724677606320e4369a6125feadd1e649cfcf69d238261f","first_seen":"2025-12-10T09:38:23.390502Z","last_seen":"2026-04-20T21:36:39.598451Z","times_seen":157,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":348,"dns":0,"connect":0,"send":0,"wait":123,"receive":473,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/css/main.css","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/css/main.css HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:46 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 Dec 2025 06:25:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 761651\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":761651,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6d5c3c6d82fa74763101376d2249ad68","sha1":"1c070429f6f5acdf21df92d9c61aa05e1c2994f6","sha256":"08984336ec5ea421cdffeafd115c1b80902a0883dce8690166693d6a39eb6388","sha512":"b8d7eb60a0b0cc36bd6a7710ffd19d99235de2544c2cb81619a346a48ee2ac8155c8404a29a18e4a763fe3ae63a5bea8770676002c0d4ee35d4d0b4ad5800e0e","ssdeep":"1536:xH4ji8pr6MymbvoCR6YD/arjujiGi3raG85PedWTsLpUyTkjg62opiXpw6UzFWq3:xtjWG85PevLpUyT4g6PBWV1eD","tlshash":"3cf4a7bd14103339bdb7893ad15066249b35f1e2eb235efea89563c44bcf1a630d261b","first_seen":"2025-12-10T09:38:23.385794Z","last_seen":"2026-04-20T21:36:39.587889Z","times_seen":155,"resource_available":false,"data":null}},"time_used":1016,"timings":{"blocked":658,"dns":0,"connect":0,"send":0,"wait":117,"receive":241,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/images/8f07873715a73121ce101e3ee4e09b67.png","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:47.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/images/8f07873715a73121ce101e3ee4e09b67.png HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:47 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 22 Dec 2025 13:01:30 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7740\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"32ee686865a3d090c005f849614b5bd6","sha1":"5dc475fe91e881ef6aa83faded314cc0348d0409","sha256":"43f481c9bda6047ab7fc017a7cec74bfe2730cfc7b916d1b69d04eb0721b2aae","sha512":"2a5af88661436938b5b7b6c8fad00b87dcde6cae4634958087c9ec62902e458807dae53069e4b75ae6bea5db9504955ca1344a019a64f6f3d21b4ef9c3640653","ssdeep":"192:UPfE9IUxtYlS6WctIj2Ohzrxj8IKGsZeIObR32f6:sfcxTpiIRv5YWbR32f6","tlshash":"c3f19fdfe3a786ef69d9ce2356bd62440f461300d51a0cf3e5987e5c181b3892f68086","first_seen":"2024-08-14T01:57:32Z","last_seen":"2026-04-20T12:15:03.829504Z","times_seen":109,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/js/2.main.js","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/js/2.main.js HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:46 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 Dec 2025 06:25:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 239651\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":239651,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64325)","md5":"deae935f339e6bdde0c6a3fd46025baa","sha1":"20ee661a3d1af22cef68f815bad1ee6d280be018","sha256":"51ef64ff3f7262761ee8f92fcb93b652d08ef60d5b387b2a882852df6a58c72e","sha512":"7ab9fa46a6ce7b804d185db9937a85003e5db6d275500f80f127a78c45b84d276d3e06cecbfd042c60ea2e700be74dab6268fc65bb81bc4a326f987fa79387a2","ssdeep":"3072:ch31sIRhaEI84E/FACVvGC8ZdEXkbugnMyeN3M4jYxeD2av39Ss:w31sIwEIq/FACVv3CupYxQ2+NSs","tlshash":"b334e8957a51e59c91eb02dba83e4928f6243f08f938d810a4e5cdcd796cbc4753ba33","first_seen":"2025-12-10T09:38:23.393926Z","last_seen":"2026-04-20T21:36:39.578184Z","times_seen":157,"resource_available":true,"data":null}},"time_used":698,"timings":{"blocked":573,"dns":0,"connect":0,"send":0,"wait":118,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/js/custom.js","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/js/custom.js HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 22 Dec 2025 11:24:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5696\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5696,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"6466156de25b49a993d6d7ec8b59c714","sha1":"cdb535f06a75a2bd9af4665a63f3aa87f8103155","sha256":"e37eef55db2b7b938a7abc30cf28e143a07a6cbe688a622b138f79c9a427394b","sha512":"db83dc9e6b4daecfa4b44155951329020356bcc5dc85ca3fee4d222076a54cc8dbb1c6e17977a5c26d16f6251e9af1c8c5551ce54156501aaff4c8a51c8985b5","ssdeep":"96:s8cXOgqHjiLcDD+3/Ljj0eCZUyQ1NMmvpec7JE4v:s8ngwjiLGiPXAU31Ndv0cz","tlshash":"cbc1611922220831a57313fdbbe24245fe16487365c0a2a53cacce481fb1a5557fafee","first_seen":"2026-03-15T22:02:29.70282Z","last_seen":"2026-04-20T21:36:39.600862Z","times_seen":68,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":671,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.icloud.com/system/icloud.com/2546Build34/favicons/find-favicon-dark-32x32.png","fqdn":"www.icloud.com","domain":"icloud.com","tld":"com"},"ip":{"addr":"2.20.166.31","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:47.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.icloud.com","organization":"Apple Inc."},"issuer":{"commonName":"Apple Public EV Server RSA CA 1 - G1","organization":"Apple Inc."},"validity":{"start":"Tue, 24 Feb 2026 17:38:51 GMT","end":"Tue, 01 Sep 2026 19:55:33 GMT"},"fingerprint":{"sha1":"67:39:61:38:92:80:DC:81:78:9F:CE:08:E0:BD:B8:AA:57:D1:48:A0","sha256":"83:D2:C4:63:9A:D5:17:44:D0:CB:3D:2A:02:E6:82:37:F7:FE:F6:83:27:4D:36:06:DF:B8:6C:B1:49:E9:E1:D6"}}},"request":{"raw":"GET /system/icloud.com/2546Build34/favicons/find-favicon-dark-32x32.png HTTP/1.1\r\nHost: www.icloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: AppleHttpServer/a3fb6e96e80a\r\ncontent-type: text/html\r\ncontent-length: 1205\r\netag: \"19ccc43e2d84b5\"\r\ncontent-language: en-us\r\ncontent-encoding: br\r\nvary: accept-encoding\r\ncontent-version: V1\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=30, report-uri=\"https://feedbackws.icloud.com/reportRaw\"\r\nx-robots-tag: none, noarchive\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ncontent-security-policy: base-uri 'none'; default-src 'none'; form-action 'none'; frame-ancestors 'none'\r\nx-apple-request-uuid: d95770f6-e105-4595-9592-cdcd2bbc742f\r\naccess-control-expose-headers: X-Apple-Request-UUID,Via\r\ndate: Tue, 24 Mar 2026 13:16:47 GMT\r\nset-cookie: x-apple-group=true; path=/; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T03:09:26.162185Z","times_seen":14042685,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.icloud.com/system/icloud.com/2546Build34/favicons/find-favicon-dark-180x180.png","fqdn":"www.icloud.com","domain":"icloud.com","tld":"com"},"ip":{"addr":"2.20.166.31","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:47.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.icloud.com","organization":"Apple Inc."},"issuer":{"commonName":"Apple Public EV Server RSA CA 1 - G1","organization":"Apple Inc."},"validity":{"start":"Tue, 24 Feb 2026 17:38:51 GMT","end":"Tue, 01 Sep 2026 19:55:33 GMT"},"fingerprint":{"sha1":"67:39:61:38:92:80:DC:81:78:9F:CE:08:E0:BD:B8:AA:57:D1:48:A0","sha256":"83:D2:C4:63:9A:D5:17:44:D0:CB:3D:2A:02:E6:82:37:F7:FE:F6:83:27:4D:36:06:DF:B8:6C:B1:49:E9:E1:D6"}}},"request":{"raw":"GET /system/icloud.com/2546Build34/favicons/find-favicon-dark-180x180.png HTTP/1.1\r\nHost: www.icloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: AppleHttpServer/a3fb6e96e80a\r\ncontent-type: text/html\r\ncontent-length: 1205\r\netag: \"19ccc43e2d84b5\"\r\ncontent-language: en-us\r\ncontent-encoding: br\r\nvary: accept-encoding\r\ncontent-version: V1\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=30, report-uri=\"https://feedbackws.icloud.com/reportRaw\"\r\nx-robots-tag: none, noarchive\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ncontent-security-policy: base-uri 'none'; default-src 'none'; form-action 'none'; frame-ancestors 'none'\r\nx-apple-request-uuid: c16ba138-dc42-41c0-b97b-c59a035197a9\r\naccess-control-expose-headers: X-Apple-Request-UUID,Via\r\ndate: Tue, 24 Mar 2026 13:16:47 GMT\r\nset-cookie: x-apple-group=false; path=/; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T03:09:26.162185Z","times_seen":14042685,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/fonts/SF-Pro-Display/v3/sf-pro-display_semibold.woff2","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/fonts/SF-Pro-Display/v3/sf-pro-display_semibold.woff2 HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Dec 2025 00:09:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 129484\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":129484,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 129484, version 1.0","md5":"5071d158eb5ba0431b8922015ed930c6","sha1":"46a034ed9ff3728e11dc64a0c9940d552daf6083","sha256":"93c70675bf7a740fb2b357e085c31de4e1adcf2b6a636135aad9cf1d65d93b53","sha512":"6018008b75be892b1fc4609ca91b70357a756e93832b9327ce30a78c091fbca3bc43b14eb5555befc1268098e2e3641a59bb89eae61a82e2de149b4a833b2eab","ssdeep":"3072:GG0TPZl6kKpGuhPvj1xO1V7s7DHpMjbGnFRsLEekloxzlxlJy5yKat:IPZwGkvj7p7GbGnFRs4boxzPl5t","tlshash":"6cc312deb524a70da96e44ba508b47a30ff54212d2fe81b67f019cd37b12de3904e762","first_seen":"2024-10-26T16:56:26.218198Z","last_seen":"2026-04-22T03:08:05.854854Z","times_seen":8705,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":224,"dns":0,"connect":114,"send":0,"wait":115,"receive":342,"ssl":118},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.icloud.com/system/icloud.com/2546Build34/wallpaper_dark.svg","fqdn":"www.icloud.com","domain":"icloud.com","tld":"com"},"ip":{"addr":"2.20.166.31","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.icloud.com","organization":"Apple Inc."},"issuer":{"commonName":"Apple Public EV Server RSA CA 1 - G1","organization":"Apple Inc."},"validity":{"start":"Tue, 24 Feb 2026 17:38:51 GMT","end":"Tue, 01 Sep 2026 19:55:33 GMT"},"fingerprint":{"sha1":"67:39:61:38:92:80:DC:81:78:9F:CE:08:E0:BD:B8:AA:57:D1:48:A0","sha256":"83:D2:C4:63:9A:D5:17:44:D0:CB:3D:2A:02:E6:82:37:F7:FE:F6:83:27:4D:36:06:DF:B8:6C:B1:49:E9:E1:D6"}}},"request":{"raw":"GET /system/icloud.com/2546Build34/wallpaper_dark.svg HTTP/1.1\r\nHost: www.icloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: AppleHttpServer/a3fb6e96e80a\r\ncontent-type: text/html\r\ncontent-length: 1205\r\netag: \"19ccc43e2d84b5\"\r\ncontent-language: en-us\r\ncontent-encoding: br\r\nvary: accept-encoding\r\ncontent-version: V1\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=30, report-uri=\"https://feedbackws.icloud.com/reportRaw\"\r\nx-robots-tag: none, noarchive\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ncontent-security-policy: base-uri 'none'; default-src 'none'; form-action 'none'; frame-ancestors 'none'\r\nx-apple-request-uuid: 22195b9f-cabf-46c3-b9b0-69d62342b0e0\r\naccess-control-expose-headers: X-Apple-Request-UUID,Via\r\ndate: Tue, 24 Mar 2026 13:16:46 GMT\r\nset-cookie: x-apple-group=false; path=/; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T03:09:26.162185Z","times_seen":14042685,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/images/e353669b941d54cc2081df0bcbe4566c.png","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.181Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /aU3VJ0FM/assets/images/e353669b941d54cc2081df0bcbe4566c.png HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T03:09:26.162185Z","times_seen":14042685,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/fonts/fonts?families=SF+Pro,v3","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/fonts/fonts?families=SF+Pro,v3 HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:46 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 17 Dec 2025 12:45:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 16114\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16114,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"feb1c517c4b2e4d08c17c9108b64b40d","sha1":"5af79d5bec0852dd295760f0729b5f30981ecd0f","sha256":"f1af8af0b0c1be4a729c73d19762ca152599406989c955b43b09e066ab6b210a","sha512":"b2205c500c061c807bd4dbf327624cf2749c4523df9e6d2a51df013d7c3787718c9949ab3634ab1c1c992317b85cf4e9d483542a8496bdeeadacb338b2a7ebcb","ssdeep":"384:fPNhtXtjxKkmS33JSA4Zpk0XSJ+SqCOqmsWEm0YqNnvPcqUB9Vu9rog/8quq1Vh:fPNhtXtjxKkmS33JSA4HnXSgCOqmsWEL","tlshash":"6f72ba31511cfb36c7700962a3ea7f0b17057160562a6a9b3971b908bc57ceda290ffe","first_seen":"2026-01-03T23:26:52.009216Z","last_seen":"2026-04-07T10:46:50.29326Z","times_seen":99,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/fonts/SF-Pro-Text/v3/sf-pro-text_regular.woff2","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/fonts/SF-Pro-Text/v3/sf-pro-text_regular.woff2 HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Dec 2025 00:09:56 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 220536\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":220536,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 220536, version 1.0","md5":"059d2edeb663a16de959975d5ed21db8","sha1":"3674a0e6fbc086cf109a1b192ef5016d328fdfa5","sha256":"3231b77ee2775dadbaa76de85f95763976aff1091f63a67fa553d727a6edb933","sha512":"fc26a8fb8b2ee58fe21fb45a1812f6ccccfc5f8ed55b4acd49657c9e4de33fbfe0171c01a7a8fd13fc1e4090cc5d003c760054029f76af6004a0dd3462112cec","ssdeep":"3072:2CVJbxBgG+v9LhLHCl1w6xw5WRGJWXyCk3sXEAPV9v8LMEXJOxH81AYRtCjbR2q:2CVJbcGuphjQ1w6NRb144/LvEJVNtQ2q","tlshash":"b6241215f394a434b28f61505f818fa87364fa8185f69fe0b37b45ffabc2a14351a1ca","first_seen":"2023-05-01T11:03:15Z","last_seen":"2026-04-22T03:08:05.864427Z","times_seen":10046,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":225,"dns":1,"connect":115,"send":0,"wait":117,"receive":459,"ssl":121},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/fonts/SF-Pro-Text/v3/sf-pro-text_semibold.woff2","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/fonts/SF-Pro-Text/v3/sf-pro-text_semibold.woff2 HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Dec 2025 00:10:06 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 234260\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":234260,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 234260, version 1.0","md5":"b37ecd8895b373064f6e8630804f08aa","sha1":"f2bfb2774a6294a641973b2920a9b2d7b2d863c9","sha256":"7b0041c48ba67087fcf5f6e8ec8d24e95db06cae9bf78c45b4542984bcb7208c","sha512":"5732de86b7022db347749e010e64a6b5a771cdd4d81d03f20593268028455cb2ea2b4047566cc742a00106584f7584bd7d5a79bad7fab09292c8dea4493542b3","ssdeep":"6144:e1+WZBHan60UAryv9uqI7l/i2c43oOBODy9HgW69FOdns:YRZdAr6PI7Zcm7Omlr69FOs","tlshash":"6234231774803114faaa7505df798a9a45835dfdccd0ca7cc8b6203cbe6b6d9e486c2e","first_seen":"2023-05-01T11:03:15Z","last_seen":"2026-04-22T03:08:05.851012Z","times_seen":9576,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":118,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsupport-alert-location.click/aU3VJ0FM/assets/js/6.main.js","fqdn":"getsupport-alert-location.click","domain":"getsupport-alert-location.click","tld":"click"},"ip":{"addr":"50.6.199.153","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsupport-alert-location.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 00:23:08 GMT","end":"Mon, 22 Jun 2026 00:23:07 GMT"},"fingerprint":{"sha1":"41:19:75:4C:A6:D7:DB:01:D6:04:4A:EF:BB:3B:BB:C3:B1:93:B5:E0","sha256":"CD:7A:C6:15:04:06:E4:4B:C4:15:97:31:56:17:87:C3:5B:56:EC:10:69:B5:C5:FD:AE:F2:D3:A6:53:C4:09:30"}}},"request":{"raw":"GET /aU3VJ0FM/assets/js/6.main.js HTTP/1.1\r\nHost: getsupport-alert-location.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=\r\nCookie: PHPSESSID=69b466a96da7b8810bae93a5d2f9cbfb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Mar 2026 13:16:46 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 Dec 2025 06:25:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 123413\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":123413,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64325)","md5":"465ddf7acab86aa7e6b2865cac3e6ca8","sha1":"363e5b71ebea69776cc0bcf9d478309356173bec","sha256":"b9da11c070e62fe1b27482a11a53206799d7862966a1242cf5c1eceb33ed9ac4","sha512":"0b325d2e8a44d5ea828b7f54a882fd7ae81e0e6b39afdc25484678bc4105cade0627e803327b86499cbc261b69fa0bdf8b1a96ae308715d2339c5ca4e2c89c21","ssdeep":"1536:R6Zi1zXyeShUKduObhyu4Zc8rZsDw12SzjSr9wdU6NLpnNoWAZ0ZXG:nVIhIDbW","tlshash":"10c31acdf691f09243a761f9907f210ff37a685cb41ca460e245d5c9bcaa40e932bf69","first_seen":"2025-12-10T09:38:23.387213Z","last_seen":"2026-04-20T21:36:39.576211Z","times_seen":156,"resource_available":true,"data":null}},"time_used":1052,"timings":{"blocked":263,"dns":1,"connect":153,"send":0,"wait":118,"receive":390,"ssl":125},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"getsupport-alert-location.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"getsupport-alert-location.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.icloud.com/system/icloud.com/2546Build34/wallpaper.svg","fqdn":"www.icloud.com","domain":"icloud.com","tld":"com"},"ip":{"addr":"2.20.166.31","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getsupport-alert-location.click/aU3VJ0FM/?qtk3gcZBwN49ArACeTQEeWJ1iP34ZJogKKL98vqJDsvHhVmUgCq1Bu1POo0OlmgRtZR130wqViNI1oI1HbJkwU0DqW0BMmQSyQiewlIyMvxenusiFqpTObHKSFCZqycC13dcIfL0N7bodsMarP3Ool8Cz2Yc8uSfYrglNNzDie=","date":"2026-03-24T13:16:46.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.icloud.com","organization":"Apple Inc."},"issuer":{"commonName":"Apple Public EV Server RSA CA 1 - G1","organization":"Apple Inc."},"validity":{"start":"Tue, 24 Feb 2026 17:38:51 GMT","end":"Tue, 01 Sep 2026 19:55:33 GMT"},"fingerprint":{"sha1":"67:39:61:38:92:80:DC:81:78:9F:CE:08:E0:BD:B8:AA:57:D1:48:A0","sha256":"83:D2:C4:63:9A:D5:17:44:D0:CB:3D:2A:02:E6:82:37:F7:FE:F6:83:27:4D:36:06:DF:B8:6C:B1:49:E9:E1:D6"}}},"request":{"raw":"GET /system/icloud.com/2546Build34/wallpaper.svg HTTP/1.1\r\nHost: www.icloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getsupport-alert-location.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: AppleHttpServer/a3fb6e96e80a\r\ncontent-type: text/html\r\ncontent-length: 1205\r\netag: \"19ccc43e2d84b5\"\r\ncontent-language: en-us\r\ncontent-encoding: br\r\nvary: accept-encoding\r\ncontent-version: V1\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=30, report-uri=\"https://feedbackws.icloud.com/reportRaw\"\r\nx-robots-tag: none, noarchive\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ncontent-security-policy: base-uri 'none'; default-src 'none'; form-action 'none'; frame-ancestors 'none'\r\nx-apple-request-uuid: cd7efdb1-69a6-43d1-ad6c-7c5c9c933ede\r\naccess-control-expose-headers: X-Apple-Request-UUID,Via\r\ndate: Tue, 24 Mar 2026 13:16:46 GMT\r\nset-cookie: x-apple-group=false; path=/; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T03:09:26.162185Z","times_seen":14042685,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}