WEBSITE ANALYSIS REPORT

https://www.i21h.com/article/639153001010774708/quickbooks-login-issue-that-leaves-users-stuck-on-already-logged-in-for-payroll-online-desktop-enterprise-and-intuit-access-problems

25 May 2026 · 09:23:33.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

09:23:10.708 GET 200 document 52.6 KB 154 ms —

09:23:11.053 GET 200 stylesheet 5.5 KB 582 ms —

09:23:11.055 GET 200 stylesheet 187.2 KB 16 ms —

09:23:11.057 GET 200 stylesheet 30.3 KB 10 ms —

09:23:11.059 GET 200 stylesheet 28.9 KB 15 ms —

09:23:11.061 GET 200 stylesheet 4.8 KB 14 ms —

09:23:11.062 GET 200 stylesheet 3.5 KB 7 ms —

09:23:11.064 GET 200 stylesheet 5.1 KB 13 ms —

09:23:11.068 GET 200 img 8.1 KB 10 ms —

09:23:11.076 GET 200 script 162.8 KB 72 ms 2 alerts

09:23:11.079 GET 200 img 561.1 KB 502 ms —

09:23:11.084 GET 200 img 840.9 KB 89 ms —

09:23:11.085 GET 200 img 835.7 KB 106 ms —

09:23:11.086 GET 200 img 1.42 MB 205 ms —

09:23:11.089 GET 200 img 828.8 KB 157 ms —

09:23:11.092 GET 200 img 480.4 KB 179 ms —

09:23:11.094 GET 200 img 1018.7 KB 232 ms —

09:23:11.095 GET 200 img 2.50 MB 356 ms —

09:23:11.096 GET 200 img 139.7 KB 35 ms —

09:23:11.097 GET 200 img 156.4 KB 366 ms —

09:23:11.098 GET 200 script 94.9 KB 42 ms —

09:23:11.099 GET 200 script 22.8 KB 26 ms —

09:23:11.104 GET 200 script 45.6 KB 26 ms —

09:23:11.105 GET 200 script 2.2 KB 26 ms —

09:23:11.107 GET 200 script 463.7 KB 594 ms —

09:23:11.478 GET 200 font 7.6 KB 311 ms —

09:23:11.481 GET 200 font 7.7 KB 184 ms —

09:23:11.482 GET 200 fetch 926 B 171 ms 2 alerts

09:23:11.497 GET 200 font 7.8 KB 267 ms —

09:23:11.498 GET 200 font 75.4 KB 12 ms —

09:23:11.512 GET 200 font 7.6 KB 118 ms —

09:23:11.621 GET 200 xhr 52.6 KB 74 ms —

09:23:11.678 GET 200 img 5.9 KB 8 ms —

09:23:11.680 GET 200 img 66.1 KB 10 ms —

09:23:11.891 GET 200 script 4.6 KB 540 ms 1 alerts

09:23:12.009 POST 204 beacon 0 B 184 ms 3 alerts

09:23:12.014 GET 200 script 74.1 KB 13 ms 2 alerts

09:23:12.073 GET 200 script 41.6 KB 13 ms 2 alerts

09:23:12.076 GET 200 fetch 1.2 KB 211 ms 2 alerts

09:23:12.144 GET 200 fetch 2.3 KB 182 ms 2 alerts

09:23:12.340 GET 204 img 0 B 145 ms 2 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://adexchangerapid.com/script/i.php?t=1&c=24096254&stamat=m%257C%252C%252CQjezo3IqoGU3BJ_GH0dEdHP3xP.931%252ChkNWnyk8V1nurE_YGPlfi6918vCdw6CoV2Wt5kYNZZb_UiO3Rwf8kDF0yrfuCuTAbV5jzxTw__BsRO_1TJP_vwrbBBwJLk0zqznl1XVFMuuPZA9WVHi1vXCCo_0x7nH4FpsJb7g74ToIgVAg801ERmpKBftwck0149mv48jRbxYcK8tV8pXaYtC0KHNVrZYP1QrI66xtGc_s70NNIzmbNPX1gJVLlYZCwKmYkD9f7eTbfuXNSL29XgdGDHbIlhgepR8FCm4ypd_9Ug1SMaAXuTt8wigfkMgdeAP03y2JwYzsiCWenpVK5aC4pbU5C7SPAR8Qf_vw_4-XqMZjwrkPg7gNGsV0PaB-AezfeFFQU0SwdIsb15Izwp-Um8RhQ2-1K8-E9tyeL88LoUg4rtG4tUlUsPLsmqFU0N9T3zbBdjjRPsCgOBoXci8RTlKHsZGjTxUP7RxGWXQKZeCw_hEhliTMnkyae6c7LgSFtwx1Lpm2DLh3GYqoaSMZMi3uDppIynBoAK6rqgY-YSUGe4Vk4r9u9Su8MD6l4NDkStIME9qrg7pvry_yPYxef4Hl6NynZtgKehlLiAZe1vX6iuHBmOT_6ss5ziQWl_0x5rFTGpG-BE9dzd5eIoGBZTj7ulKRy2OkHTaa0doy1Tg9QXslLfQjAxn5d2WYUyQrTFQYuz0pWB4xGhjKPl3MMLhX01HU1Dn4NLzq86tClShg6ctwgrug9JxQbrio23YtPW4YUf7-t5ce5Ai6YgvN_qrqCd6Mn-iv_CUV5wqkmM5ELGTn19JaMJ8wlKiH4SZNxLBzKy6vWcg04p3d0ZE76CiL3LwcMXycH_6BlHbY8BIRpC1Q77ymi0-lo_6Ovk4Zvk_DSHvZG0PQFfim2JVaOK9cqiTIW5Or-Gt74wxdsU12-hVvrQ%252C%252C&utsid=67ccb9674f554a462f086727214932a8&cbpage=https%3A%2F%2Fwww.i21h.com%2Farticle%2F639153001010774708%2Fquickbooks-login-issue-that-leaves-users-stuck-on-already-logged-in-for-payroll-online-desktop-enterprise-and-intuit-access-problems&cbref=

IP / ASN

172.67.222.246

AS13335 · CLOUDFLARENET

Requested by: https://www.i21h.com/article/639153001010774708/quickbooks-login-issue-that-leaves-users-stuck-on-already-logged-in-for-payroll-online-desktop-enterprise-and-intuit-access-problems

Resource information

File type: Not recorded
MIME type: text/plain
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 15:40:42.472 UTC
Times seen: 19285211

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · E8
Subject: adexchangerapid.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 8A:97:52:6B:47:54:89:D1:AF:0F:D2:63:3B:35:2B:27:02:88:F8:E8
Valid from: Tue, 28 Apr 2026 12:27:49 GMT
Valid until: Mon, 27 Jul 2026 12:27:48 GMT

Technology fingerprints

Google Cloud (IaaS)
Cloudflare (CDN)
Google Cloud CDN (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/i.php?t=1&c=24096254&stamat=m%257C%252C%252CQjezo3IqoGU3BJ_GH0dEdHP3xP.931%252ChkNWnyk8V1nurE_YGPlfi6918vCdw6CoV2Wt5kYNZZb_UiO3Rwf8kDF0yrfuCuTAbV5jzxTw__BsRO_1TJP_vwrbBBwJLk0zqznl1XVFMuuPZA9WVHi1vXCCo_0x7nH4FpsJb7g74ToIgVAg801ERmpKBftwck0149mv48jRbxYcK8tV8pXaYtC0KHNVrZYP1QrI66xtGc_s70NNIzmbNPX1gJVLlYZCwKmYkD9f7eTbfuXNSL29XgdGDHbIlhgepR8FCm4ypd_9Ug1SMaAXuTt8wigfkMgdeAP03y2JwYzsiCWenpVK5aC4pbU5C7SPAR8Qf_vw_4-XqMZjwrkPg7gNGsV0PaB-AezfeFFQU0SwdIsb15Izwp-Um8RhQ2-1K8-E9tyeL88LoUg4rtG4tUlUsPLsmqFU0N9T3zbBdjjRPsCgOBoXci8RTlKHsZGjTxUP7RxGWXQKZeCw_hEhliTMnkyae6c7LgSFtwx1Lpm2DLh3GYqoaSMZMi3uDppIynBoAK6rqgY-YSUGe4Vk4r9u9Su8MD6l4NDkStIME9qrg7pvry_yPYxef4Hl6NynZtgKehlLiAZe1vX6iuHBmOT_6ss5ziQWl_0x5rFTGpG-BE9dzd5eIoGBZTj7ulKRy2OkHTaa0doy1Tg9QXslLfQjAxn5d2WYUyQrTFQYuz0pWB4xGhjKPl3MMLhX01HU1Dn4NLzq86tClShg6ctwgrug9JxQbrio23YtPW4YUf7-t5ce5Ai6YgvN_qrqCd6Mn-iv_CUV5wqkmM5ELGTn19JaMJ8wlKiH4SZNxLBzKy6vWcg04p3d0ZE76CiL3LwcMXycH_6BlHbY8BIRpC1Q77ymi0-lo_6Ovk4Zvk_DSHvZG0PQFfim2JVaOK9cqiTIW5Or-Gt74wxdsU12-hVvrQ%252C%252C&utsid=67ccb9674f554a462f086727214932a8&cbpage=https%3A%2F%2Fwww.i21h.com%2Farticle%2F639153001010774708%2Fquickbooks-login-issue-that-leaves-users-stuck-on-already-logged-in-for-payroll-online-desktop-enterprise-and-intuit-access-problems&cbref= HTTP/1.1
Host: adexchangerapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.i21h.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 204 No Content
server: cloudflare
date: Mon, 25 May 2026 09:23:12 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=LWcOYTV7%2FjXe2%2Fladn2Np00crV7gFieH4VTiTTtBQcLE58gZMRNojT7u5hhqrLqr14FVstawW4RWrsB97OhXFoYWwG6JCFKzQwjdgyQfHcB256RydvDFg5rOQhr%2B61aFEVS13xfX"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: a0137ae228f2b4fa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

https://www.i21h.com/article/639153001010774708/quickbooks-login-issue-that-leaves-users-stuck-on-already-logged-in-for-payroll-online-desktop-enterprise-and-intuit-access-problems

Domain graph

Hostnames

Connections