urlquery.net
WEBSITE ANALYSIS REPORT

https://sso-upheld-cloud.square.site

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document41.0 KB343 ms4 alerts
GET200stylesheet149.0 KB287 ms—
GET200script13.0 KB311 ms—
GET200script61.7 KB49 ms—
GET200script171.6 KB310 ms—
GET200script1.18 MB293 ms—
GET200script2.88 MB307 ms—
GET200script65.6 KB65 ms—
GET200stylesheet29.3 KB29 ms—
GET200script73.3 KB40 ms—
GET200script3.83 MB39 ms—
GET200font21.1 KB139 ms—
POST200xhr2 B510 ms—
OPTIONS200xhr0 B520 ms—
GET200stylesheet20.8 KB20 ms—
GET200script1010 B57 ms—
GET200fetch18.4 KB13 ms—
GET200fetch2.5 KB12 ms—
GET200fetch229 B259 ms—
POST200fetch16 B276 ms—
OPTIONS200fetch0 B183 ms—
POST200fetch16 B644 ms—
OPTIONS200fetch0 B181 ms—
GET200font34.2 KB9 ms—
GET200font33.0 KB10 ms—
GET204fetch0 B219 ms4 alerts

Transaction #45

Request / response

URL

GET HTTPS
https://sso-upheld-cloud.square.site/app/cms/ping

IP / ASN

United States 74.115.51.4

AS27647 · WEEBLY

Requested by
https://sso-upheld-cloud.square.site/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious
Cloudflare DNS SinkholedmediumMalicious
OpenDNS Phishing BlockmediumPhishing
CIRA Canadian Shield DNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /app/cms/ping HTTP/1.1
Host: sso-upheld-cloud.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://sso-upheld-cloud.square.site/
Sec-GPC: 1
Connection: keep-alive
Cookie: _snow_ses.7130=*; _snow_id.7130=955da169-5d0c-4486-8081-9009feb8e634.1791641856.1.1791641856.1791641856.40707dfa-0e6a-4b1d-b3ed-a5c28b945f8f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 204 
date: Sat, 10 Oct 2026 14:17:37 GMT
cf-ray: a4863fe77d01b28a-OSL
cf-cache-status: BYPASS
cache-control: no-cache, private
server: cloudflare
x-revision: bc8da6f199269f50608e4fbe033fe3cb02e9f3e6
strict-transport-security: max-age=7776000
x-host: grn126.sf2p.intern.weebly.net
x-ratelimit-limit: 60
x-ratelimit-remaining: 59
x-request-id: 00ed2e93ea6f961091a87cf059bd17a5
set-cookie: publishedsite-xsrf=eyJpdiI6IlRpMUo2Q3RGcW5EZS9IVDZUKzRjNGc9PSIsInZhbHVlIjoiV2FGZ3ZkUWRnRzN4UmkvV04xZVByS0pxZTl5VTYrM3pSR1BWNE9ETCtuZmM5ZGtLZTNpTzlOUWhzakFHbnVOWmsyeW1TNnV3dkE4a3pvV0grY0htaUhhb0JsMXA0VWRrc1RYRzE5OTA2ZitDaWt2UmY4YjVHaFZZeXFRTmJsVWIiLCJtYWMiOiJiMWM0ZWI1ZWRhMDdkZmZhODk3NDg3NjhhYzU3NjJmN2QwNWI5MDdlZGM5ZjE2OTFhZTIwMTQ4NjM0NDExNDRkIiwidGFnIjoiIn0%3D; expires=Sat, 10 Oct 2026 14:27:37 GMT; Max-Age=600; path=/; secure; samesite=lax
XSRF-TOKEN=eyJpdiI6Ik1xTy9jM2tJakRiemRHL2k2bXhxOGc9PSIsInZhbHVlIjoiZ1Y2KzJQKzY4WGx3Wlk1UHN6M1VvTkxDWkNHb1RSZXcycGJ6NEV6K3RxYVJrWGZmRGs3Y2xHeDFzSENLWnBEM1JGZ256OWRTMFFhZ3QvNDFKSmkwREw5bFBqemdmaGM4THRoSFdSNVZ6VDNEV1lDTitBajVvUHgrRk56TTVvUE4iLCJtYWMiOiJhMjI3NGMzM2I4NjQyMDhmOTg3NmUwMGY0OWI4Yzc4MDkxNGYxZDM0MzJiY2Y3YTdjYWI4YjhkMTllNDZkMmNlIiwidGFnIjoiIn0%3D; expires=Sat, 10 Oct 2026 14:27:37 GMT; Max-Age=600; path=/; secure; samesite=lax
PublishedSiteSession=eyJpdiI6Im9wcXl3L0tCcVRtak5QTFVKKzhEMGc9PSIsInZhbHVlIjoiOUpCMHJQYXN1RjJCRlhBR0I2ZzlvL2VMWSt4RWQ4bWswcDdabytqSy9uN3h6Qmk5QUdmZloybW1WMEM2dEdqU0M2R2Z1R1pNQkFiblVGU2YrWXNEVTZ4Nm1qemxvekd4SWVYUlcvUE9TdkdUVzJ3bFQ4RTJMVjFjbjdHeEQ3MUEiLCJtYWMiOiI3ZWE3YjJmMDUwN2I0YTQ2NTU5NjBhYzc2ZjZiZWNkNzljZDk3NWFjMmUwNzZhMzc4ZTljM2Q4ZmZhYzMzNGUzIiwidGFnIjoiIn0%3D; expires=Sat, 10 Oct 2026 14:27:37 GMT; Max-Age=600; path=/; secure; httponly; samesite=lax
__cf_bm=r__7UnJaEjcROlqWPVPGGfj7Z7QsZlDZBDmZTo6QfCc-1791641857.1980126-1.0.1.1-rmM8TKBideJc2aLSAM.NM0i8yqGZTovx_4ac7qLy_LoxubTtLnNqmXJbYvvamqpltxSpq144051cosHOFyS0WHKfhh6DN4kWbibTfM7RkKvmXa.9k0MNewkk1oH6TYPr; HttpOnly; SameSite=None; Secure; Path=/; Domain=square.site; Expires=Sat, 10 Oct 2026 14:47:37 GMT
X-Firefox-Spdy: h2

GET200script11.2 KB18 ms—
GET200script16.8 KB16 ms—
GET200script7.5 KB13 ms—
GET200stylesheet2.0 KB11 ms—
GET200script20.4 KB11 ms—
GET200script322.6 KB21 ms—
GET200fetch216 B27 ms4 alerts
POST200xhr861 B308 ms4 alerts
GET200font22.2 KB11 ms—
GET200font22.3 KB18 ms—
GET200xhr61 B198 ms4 alerts
GET200fetch7 B239 ms—
POST200xhr2 B170 ms—
OPTIONS200xhr0 B170 ms—
GET200xhr192 B283 ms—
GET200img224 B18 ms4 alerts
GET200img6.4 KB21 ms4 alerts
POST200xhr2 B169 ms—
OPTIONS200xhr0 B170 ms—
GET200stylesheet1.7 KB11 ms—
GET200script26.2 KB11 ms—
GET200script21.3 KB10 ms—
GET200script25.0 KB10 ms—
GET200stylesheet18.5 KB10 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot