WEBSITE ANALYSIS REPORT

http://trezor-wallet-login.typedream.app/

16 Oct 2026 · 17:57:20.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:51:38.226 GET 403 document 5.0 KB 47 ms 4 alerts

17:51:38.401 GET 403 document 5.0 KB 3176 ms 4 alerts

17:51:41.892 GET 200 stylesheet 23.5 KB 23 ms 4 alerts

17:51:41.895 GET 302 script 0 B 19 ms —

17:51:41.944 GET 301 img 0 B 24 ms 4 alerts

17:51:41.948 GET 200 img 452 B 9 ms 4 alerts

17:51:41.967 GET 200 script 84.7 KB 10 ms —

17:51:41.973 GET 404 img 0 B 0 ms 4 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://trezor-wallet-login.typedream.app/favicon.ico

IP / ASN

172.67.206.36

AS13335 · CLOUDFLARENET

Requested by: http://trezor-wallet-login.typedream.app/

Resource information

File type: Not recorded
MIME type: text/html; charset=utf-8
First seen (UTC): Not recorded
Last seen (UTC): 19 Oct 2026 · 21:37:17.169 UTC
Times seen: 19217511

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Google Trust Services · WE1
Subject: typedream.app
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 77:07:C2:67:D3:00:6F:84:CB:AE:8B:60:69:66:C9:C2:E8:E3:03:7D
Valid from: Wed, 23 Sep 2026 14:58:44 GMT
Valid until: Tue, 22 Dec 2026 15:58:29 GMT

Technology fingerprints

Webpack (Miscellaneous)
Google Cloud CDN (CDN)
Google Cloud Trace (Performance)
Node.js (Programming languages)
React (JavaScript frameworks)
Cloudflare (CDN)
Next.js (JavaScript frameworks, Web frameworks)
Google Cloud (IaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: trezor-wallet-login.typedream.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 404 
date: Fri, 16 Oct 2026 17:51:42 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
x-td-version: 0.116.0
x-nextjs-cache: STALE
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding
x-powered-by: Next.js
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wWHeLmmGEgwwl5Lf63m4NGNm6Y8Q4RzoiRh2nBmqpSuYrlfXtRPP0oWN%2Fb19br%2BbCoUxrrsFcWjQYKx%2Bp9S%2BDVVDOk5%2FYWHeEu0Am2%2BdGllcb%2BCEugLZFjv0axJdJ3y%2BpOV2I1DumrLjKbmlKdekaZFlXX8%3D"}]}
x-cloud-trace-context: 70b3ad327199750d5a630644e34c7284
server: cloudflare
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: BYPASS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: zstd
cf-ray: a4b8e9bf6e91a0f0-OSL
X-Firefox-Spdy: h2

17:51:42.042 GET 200 subdocument 265.1 KB 16 ms —

17:51:42.419 POST 200 xhr 786.7 KB 141 ms —

17:51:42.903 GET No response fetch 0 B 0 ms —

17:51:44.337 GET 200 img 248 B 5 ms —

17:51:44.993 POST 200 xhr 119.8 KB 28 ms —

17:51:48.203 POST 200 xhr 11.3 KB 17 ms —

17:51:58.237 GET 200 subdocument 262.8 KB 15 ms —

17:51:58.620 POST 200 xhr 786.2 KB 35 ms —

17:51:59.408 GET No response fetch 0 B 0 ms —

17:52:00.403 GET 200 img 2.0 KB 7 ms —

17:52:01.208 POST 200 xhr 119.8 KB 26 ms —

http://trezor-wallet-login.typedream.app/

Domain graph

Hostnames

Connections