WEBSITE ANALYSIS REPORT

https://links.notification.intuit.com/ss/c/u001.Ww4OzUN9eFODKZcR-EwaPMWJ49UiaqE8fV6MIU3hs2qYyQDQS0WMO_B2nhBVa2dzOCX56WjLsL7XBh5LFICVLuCgNPBjDfUvWGA1IYxicko/4uv/wHYFB7GiR_Wkg8KuEm8zKA/h0/h001.5tpFdTCC1ifSGAZxaRiGNY_HfbC4M2-GuEFeMkMcj4M

15 Oct 2026 · 00:39:47.000 UTCpublic

Report tags: phishing voidproxy aitm
Submit tags

Request review

Phishing detected

1 detection · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

00:39:13.151 GET 302 document 0 B 588 ms —

00:39:13.749 GET 200 document 20.1 KB 568 ms 1 alerts

00:39:14.633 GET 403 img 9 B 230 ms 1 alerts

00:39:21.041 GET 200 fetch 60 B 204 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://login.smrealtydeveloper.com/?6BJxmJjEmm0zQg1=452414-fc3927c78004b66f2ff394695dc7a4ed19d374bbda64e3e295ad97dac09bcf08

IP / ASN

104.21.28.192

AS13335 · CLOUDFLARENET

Requested by: https://login.smrealtydeveloper.com/?6BJxmJjEmm0zQg=eWV6bnB3cg==

Resource information

File type: ASCII text, with no line terminators
MIME type: text/plain
First seen (UTC): 15 Oct 2026 · 00:39:57.004 UTC
Last seen (UTC): 15 Oct 2026 · 00:39:57.004 UTC
Times seen: 1

Size: 60 B (60 bytes)
MD5: d5c73a13d607a2930197ff7b83fe6e30
SHA1: 1207436ff91cc83c364dcc0b21394ca2530c5c37
SHA256: 08b2245a65fdd4fd70dac5cf22594ed10d8a7073c0c64e09ed7096c9c6e9a1f7

Certificate information

Issuer: Let's Encrypt · YE2
Subject: smrealtydeveloper.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: A5:87:8A:E6:56:B3:43:59:3D:1E:FF:18:AA:58:A4:CB:99:8A:11:99
Valid from: Wed, 14 Oct 2026 18:46:50 GMT
Valid until: Tue, 12 Jan 2027 18:46:49 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - voidProxy MitM Proxy	high	Phishing

HTTP headers

Request headers

GET /?6BJxmJjEmm0zQg1=452414-fc3927c78004b66f2ff394695dc7a4ed19d374bbda64e3e295ad97dac09bcf08 HTTP/1.1
Host: login.smrealtydeveloper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://login.smrealtydeveloper.com/?6BJxmJjEmm0zQg=eWV6bnB3cg==
Sec-GPC: 1
Connection: keep-alive
Cookie: __rbdwp=87c308b0cb4a01b687362c274ef49e96c9f1a557
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Thu, 15 Oct 2026 00:39:21 GMT
content-type: text/plain
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=4,i=?0
access-control-allow-origin: *
access-control-allow-credentials: true
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tfUqouv3H2OV2B3Cc%2BhpszGHeCKtuE1ZZbopJYBPelrGG8pEfF%2FIuSNWirpd6L%2BqidfB%2F0081dJjWdvOEFvyXLN3HnhWoPbJ%2FwiN3DYZDZcDEAdlzFFLFwWLc8p%2BW58C%2FuctK0QR2BsQbjUsn0k%3D"}]}
content-encoding: zstd
cf-ray: a4aac4247c56b505-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

00:39:21.765 GET 200 document 46.6 KB 823 ms 1 alerts

00:39:22.595 GET 200 stylesheet 111.5 KB 692 ms —

00:39:22.597 GET 200 script 586.8 KB 4552 ms —

00:39:22.599 GET 200 script 60.8 KB 808 ms —

00:39:27.228 GET 200 script 185.7 KB 933 ms —

00:39:27.340 GET 404 img 0 B 257 ms 1 alerts

00:39:28.235 GET 200 script 399.3 KB 1753 ms —

00:39:28.300 GET 404 subdocument 0 B 518 ms —

00:39:30.160 GET 200 img 45.5 KB 412 ms —

00:39:30.162 GET 200 img 3.6 KB 305 ms —

00:39:30.478 GET 200 img 1.6 KB 510 ms —

00:39:32.254 OPTIONS 200 xhr 0 B 546 ms —

https://links.notification.intuit.com/ss/c/u001.Ww4OzUN9eFODKZcR-EwaPMWJ49UiaqE8fV6MIU3hs2qYyQDQS0WMO_B2nhBVa2dzOCX56WjLsL7XBh5LFICVLuCgNPBjDfUvWGA1IYxicko/4uv/wHYFB7GiR_Wkg8KuEm8zKA/h0/h001.5tpFdTCC1ifSGAZxaRiGNY_HfbC4M2-GuEFeMkMcj4M

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://links.notification.intuit.com/ss/c/u001.Ww4OzUN9eFODKZcR-EwaPMWJ49UiaqE8fV6MIU3hs2qYyQDQS0WMO_B2nhBVa2dzOCX56WjLsL7XBh5LFICVLuCgNPBjDfUvWGA1IYxicko/4uv/wHYFB7GiR_Wkg8KuEm8zKA/h0/h001.5tpFdTCC1ifSGAZxaRiGNY_HfbC4M2-GuEFeMkMcj4M

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://links.notification.intuit.com/ss/c/u001.Ww4OzUN9eFODKZcR-EwaPMWJ49UiaqE8fV6MIU3hs2qYyQDQS0WMO_B2nhBVa2dzOCX56WjLsL7XBh5LFICVLuCgNPBjDfUvWGA1IYxicko/4uv/wHYFB7GiR_Wkg8KuEm8zKA/h0/h001.5tpFdTCC1ifSGAZxaRiGNY_HfbC4M2-GuEFeMkMcj4M

Domain graph

Network requests