urlquery Malicious - Cloaked Browser Fingerprinting
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://login.truefield.it.com/googledocs/&sa
public
Malicious detection
Review evidence →1 detection · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://login.truefield.it.com/googledocs/&sa
- Submitted IP / ASN
104.21.2.30 AS13335 · Cloudflare, Inc.
- Final URL
- https://google.com/404/&sa
- Final IP / ASN
- Not recorded
Final page
- Page title
- Error 404 (Not Found)!!1
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 1.6 KB (1606 bytes)
Detections
Activity
- HTTP requests
- 9
- Observed hosts
- 3
- Script records
- 2
Estimated HTTP data
- Sent
- ~122.6 KB
- Received
- ~28.9 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| google.com | 1 | 1997-09-15 | 2013-10-02 | 2026-10-13 | 958 B | 2.1 KB |  142.250.178.78 | |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-10-11 | 1.4 KB | 16.5 KB | 142.251.152.119 | |
| login.truefield.it.com 4 alerts | N/A | 1992-10-23 | 2026-10-16 | 2026-10-16 | 2.2 KB | 10.2 KB | 104.21.2.30 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |