WEBSITE ANALYSIS REPORT

https://www.i21h.com/article/639152992259680944/Interruptions-QuickBooks-Desktop-Enterprise-Support-Becomes-Critical-When-Multi-User-Access-Starts-Failing

25 May 2026 · 09:21:53.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

09:21:30.485 GET 200 document 60.9 KB 134 ms —

09:21:30.806 GET 200 stylesheet 5.5 KB 551 ms —

09:21:30.809 GET 200 stylesheet 187.2 KB 17 ms —

09:21:30.811 GET 200 stylesheet 30.3 KB 10 ms —

09:21:30.816 GET 200 stylesheet 28.9 KB 17 ms —

09:21:30.818 GET 200 stylesheet 4.8 KB 16 ms —

09:21:30.820 GET 200 stylesheet 3.5 KB 8 ms —

09:21:30.821 GET 200 stylesheet 5.1 KB 15 ms —

09:21:30.825 GET 200 img 8.1 KB 15 ms —

09:21:30.827 GET 200 script 162.8 KB 118 ms 2 alerts

09:21:30.828 GET 200 img 840.9 KB 138 ms —

09:21:30.830 GET 200 img 835.7 KB 157 ms —

09:21:30.831 GET 200 img 1.42 MB 211 ms —

09:21:30.838 GET 200 img 828.8 KB 234 ms —

09:21:30.842 GET 200 img 480.4 KB 249 ms —

09:21:30.844 GET 200 img 1018.7 KB 284 ms —

09:21:30.845 GET 200 img 2.50 MB 403 ms —

09:21:30.846 GET 200 img 139.7 KB 33 ms —

09:21:30.847 GET 200 img 156.4 KB 328 ms —

09:21:30.850 GET 200 img 975.9 KB 438 ms —

09:21:30.853 GET 200 script 94.9 KB 50 ms —

09:21:30.856 GET 200 script 22.8 KB 50 ms —

09:21:30.860 GET 200 script 45.6 KB 50 ms —

09:21:30.862 GET 200 script 2.2 KB 50 ms —

09:21:30.864 GET 200 script 463.7 KB 701 ms —

09:21:31.156 GET 200 font 7.6 KB 257 ms —

09:21:31.157 GET 200 font 7.7 KB 387 ms —

09:21:31.187 GET 200 fetch 926 B 286 ms 2 alerts

09:21:31.272 GET 200 font 7.8 KB 118 ms —

09:21:31.273 GET 200 font 75.4 KB 13 ms —

09:21:31.274 GET 200 font 7.6 KB 247 ms —

09:21:31.364 GET 200 xhr 60.9 KB 145 ms —

09:21:31.493 GET 200 img 5.9 KB 8 ms —

09:21:31.495 GET 200 img 66.1 KB 9 ms —

09:21:31.648 GET 200 script 4.6 KB 645 ms 1 alerts

Transaction #33

Request / response

URL

GET HTTPS

https://leostop.com/tracking/tracking.js?_=1779700891208

IP / ASN

172.237.146.18

AS20940 · Akamai International B.V.

Requested by: https://www.i21h.com/article/639152992259680944/Interruptions-QuickBooks-Desktop-Enterprise-Support-Becomes-Critical-When-Multi-User-Access-Starts-Failing

Resource information

File type: JavaScript source, ASCII text, with very long lines (4665), with no line terminators
MIME type: application/javascript
First seen (UTC): 25 May 2026 · 09:21:57.782 UTC
Last seen (UTC): 25 May 2026 · 09:21:57.782 UTC
Times seen: 1

Size: 4.6 KB (4665 bytes)
MD5: 8b7eaf6ad27e9a599c2878e028a02321
SHA1: 1ab37e9ba9809dd81586d53dd8773c8c75c2a07d
SHA256: a63fffefb2df1c17312ee541403781d8c0aed3b9cc592a4e8040f027ed0720de

Certificate information

Issuer: Let's Encrypt · R13
Subject: leostop.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 49:1F:FD:B7:53:97:67:29:72:FF:C4:2C:B0:60:77:88:C9:DD:2A:D6
Valid from: Thu, 07 May 2026 20:55:22 GMT
Valid until: Wed, 05 Aug 2026 20:55:21 GMT

Technology fingerprints

OpenResty (Web servers)
Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /tracking/tracking.js?_=1779700891208 HTTP/1.1
Host: leostop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.i21h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: openresty
date: Mon, 25 May 2026 09:21:31 GMT
content-type: application/javascript
cache-control: no-store, max-age=0
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
permissions-policy: ch-ua=(self "https://*.parklogic.com"), ch-ua-arch=(self "https://*.parklogic.com"), ch-ua-bitness=(self "https://*.parklogic.com"), ch-ua-full-version=(self "https://*.parklogic.com"), ch-ua-full-version-list=(self "https://*.parklogic.com"), ch-ua-mobile=(self "https://*.parklogic.com"), ch-ua-model=(self "https://*.parklogic.com"), ch-ua-platform=(self "https://*.parklogic.com"), ch-ua-platform-version=(self "https://*.parklogic.com"), ch-ua-wow64=(self "https://*.parklogic.com")
X-Firefox-Spdy: h2

09:21:31.773 POST 204 beacon 0 B 180 ms 3 alerts

09:21:31.775 GET 200 script 74.1 KB 16 ms 2 alerts

09:21:31.831 GET 200 script 41.6 KB 14 ms 2 alerts

09:21:31.833 GET 200 fetch 1.2 KB 277 ms 2 alerts

09:21:31.899 GET 200 fetch 2.2 KB 201 ms 2 alerts

09:21:32.118 GET 204 img 0 B 149 ms 2 alerts

https://www.i21h.com/article/639152992259680944/Interruptions-QuickBooks-Desktop-Enterprise-Support-Becomes-Critical-When-Multi-User-Access-Starts-Failing

Domain graph

Hostnames

Connections