urlquery.net
WEBSITE ANALYSIS REPORT

https://portal-upholde.zapier.app

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document24.3 KB58 ms4 alerts

Transaction #24

Request / response

URL

Navigation request GET HTTPS
https://portal-upholde.zapier.app/

IP / ASN

United States 64.239.109.1

AS16509 · AMAZON-02

Requested by
Not recorded

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious
OpenDNS Phishing BlockmediumPhishing
CIRA Canadian Shield DNS SinkholedmediumMalicious
Cloudflare DNS SinkholedmediumMalicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: portal-upholde.zapier.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
access-control-allow-headers: x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-dd-rum-session-id, traceparent
age: 0
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-encoding: br
content-security-policy: default-src 'self'; font-src 'self' data: fonts.gstatic.com zapier-fonts-production.s3.amazonaws.com *.zapier.com *.vercel.zapier-deployment.com *.zapier.app interfaces.zapier-staging.com interfaces-sandbox.vercel.zapier-staging.com dev-sandbox.zapier.app https://*.intercomcdn.com https://cdn.cookielaw.org; style-src 'self' https://interfaces.zapier.com 'unsafe-inline' fonts.googleapis.com interfaces.zapier.com interfaces.zapier-staging.com dev-sandbox.zapier.app interfaces-sandbox.vercel.zapier-staging.com design-system-css.zapier.com https://cdn.cookielaw.org; script-src 'self' https://interfaces.zapier.com 'unsafe-inline' 'wasm-unsafe-eval' https://*.zapier.com https://*.zapier-staging.com https://*.googletagmanager.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ youtube.com www.youtube.com player.vimeo.com https://*.fullstory.com https://cdn.sprig.com https://js.stripe.com https://unpkg.com/react@18/umd/react.production.min.js https://unpkg.com/react-dom@18/umd/react-dom.production.min.js https://unpkg.com/prop-types@15.8.1/prop-types.min.js https://unpkg.com/recharts@2.12.7/umd/Recharts.js https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com static.ada.support https://cdn.cookielaw.org https://optanon.blob.core.windows.net; img-src 'self' https: data: blob: https://cdn.zapier.com https://cdn.zapier-staging.com https://ucarecdn.com https://secure.gravatar.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://cdn.mxpnl.com https://rs.fullstory.com https://images.ctfassets.net https://*.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com https://cdn.cookielaw.org; connect-src 'self' https://interfaces.zapier.com zapier.com zapier-staging.com https://upload.uploadcare.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://*.g.doubleclick.net https://vimeo.com https://www.loom.com https://*.split.io https://cdn.builder.io https://*.fullstory.com https://*.sprig.com https://uploadcare.s3-accelerate.amazonaws.com/ https://design-system-bff.zapier.com https://*.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io  wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io wss://nexus-europe-websocket.intercom.io  wss://nexus-australia-websocket.intercom.io  https://uploads.intercomcdn.com https://uploads.intercomcdn.eu  https://uploads.au.intercomcdn.com  https://uploads.intercomusercontent.com https://cdn.contentful.com static.ada.support rollout.ada.support zapier-support-generative.ada.support https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://privacyportalde.onetrust.com; object-src 'self' data:; worker-src blob:; media-src 'self' https://js.intercomcdn.com https://cdn.zappy.app; form-action https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io 'self'; frame-src https:; frame-ancestors zapier.com zapier-staging.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://interfaces-synthetics-public.zapier.app/ 'self';
content-type: text/html; charset=utf-8
date: Mon, 31 Aug 2026 08:03:52 GMT
etag: W/"a8fnt7o7xej5l"
server: Vercel
set-cookie: projectSessionId=88bf2b7a-711f-4108-95f2-3f5f41969b61; Max-Age=1209600; Path=/; HttpOnly; SameSite=Lax; Secure;
strict-transport-security: max-age=63072000
x-matched-path: /_projects/[...publishedPageParams]
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::rbvlb-1788163432098-5d69c809f5ae
X-Firefox-Spdy: h2

GET200font47.3 KB83 ms—
GET200stylesheet632.4 KB254 ms—
GET200stylesheet6.6 KB349 ms—
GET200stylesheet9.9 KB102 ms—
GET200script838.1 KB82 ms—
GET200stylesheet9.9 KB98 ms—
GET200script5.8 KB63 ms—
GET200script185.3 KB87 ms—
GET200script143.3 KB87 ms—
GET200script1014.4 KB74 ms—
GET200script5.6 KB16 ms—
GET200script317.8 KB16 ms—
GET200script79.4 KB15 ms—
GET200script221.7 KB24 ms—
GET200script5.5 KB15 ms—
GET200script87.6 KB33 ms—
GET200script8.4 KB33 ms—
GET200script9.7 KB29 ms—
GET200script5.6 KB28 ms—
GET200script26.2 KB26 ms—
GET200script6.1 KB39 ms—
GET200script68.7 KB33 ms—
GET200script9.1 KB27 ms—
GET200script15.1 KB35 ms—
GET200script321.6 KB26 ms—
GET200script90.5 KB48 ms—
GET200script298.6 KB27 ms—
GET200script74.7 KB17 ms—
GET200script497.2 KB26 ms—
GET200script76.1 KB26 ms—
GET200script479.1 KB37 ms—
GET200script19.8 KB31 ms—
GET200script6.9 KB29 ms—
GET200script8.5 KB29 ms—
GET200script80 B21 ms—
GET200img184.9 KB128 ms—
GET200script1.03 MB85 ms—
GET200img674 B52 ms—
GET200script1.0 KB49 ms—
GET200img254 B42 ms4 alerts
GET200script824.1 KB124 ms—
GET200subdocument53.3 KB51 ms—
GET200subdocument16.5 KB35 ms—
GET200stylesheet81.0 KB45 ms—
GET200script824.1 KB89 ms—
GET200script824.1 KB87 ms—
GET200img2.2 KB16 ms—
GET200font39.2 KB80 ms—
GET200font39.2 KB79 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot