WEBSITE ANALYSIS REPORT

http://dow-nload-ledger-live--doc.typedream.app/

20 Oct 2026 · 02:47:59.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:47:16.605 GET 200 document 118.7 KB 269 ms 5 alerts

02:47:17.266 GET 200 stylesheet 199.1 KB 845 ms 5 alerts

02:47:17.280 GET 200 stylesheet 1.4 KB 234 ms 5 alerts

02:47:17.284 GET 200 script 16.0 KB 712 ms 5 alerts

02:47:17.289 GET 200 script 70.4 KB 713 ms 5 alerts

02:47:17.295 GET 200 script 75.9 KB 753 ms 5 alerts

02:47:17.300 GET 200 script 21.0 KB 728 ms 5 alerts

02:47:17.305 GET 200 script 83.7 KB 230 ms 5 alerts

02:47:17.311 GET 200 script 8.3 KB 728 ms 5 alerts

02:47:17.317 GET 200 script 137.8 KB 775 ms 5 alerts

02:47:17.323 GET 200 script 113.0 KB 748 ms 5 alerts

02:47:17.330 GET 200 script 1.8 KB 666 ms 5 alerts

02:47:17.337 GET 200 script 72.2 KB 723 ms 5 alerts

02:47:17.344 GET 200 script 83.1 KB 728 ms 5 alerts

02:47:17.349 GET 200 script 47.5 KB 256 ms 5 alerts

02:47:17.353 GET 200 script 13.5 KB 685 ms 5 alerts

02:47:17.357 GET 200 script 21.4 KB 690 ms 5 alerts

02:47:17.361 GET 200 script 29.2 KB 690 ms 5 alerts

02:47:17.366 GET 200 script 8.6 KB 228 ms 5 alerts

02:47:17.370 GET 200 script 2.1 KB 717 ms 5 alerts

02:47:17.375 GET 200 script 256 B 675 ms 5 alerts

02:47:17.680 GET 200 img 1.24 MB 311 ms —

02:47:18.152 GET 200 font 23.1 KB 15 ms 5 alerts

02:47:18.208 GET 200 font 23.8 KB 31 ms 5 alerts

02:47:18.210 GET 200 font 23.8 KB 17 ms 5 alerts

02:47:18.212 GET 200 font 23.7 KB 19 ms 5 alerts

02:47:18.233 HEAD 200 fetch 0 B 218 ms 5 alerts

02:47:18.252 GET 200 stylesheet 22.2 KB 87 ms —

02:47:18.254 GET 200 stylesheet 2.6 KB 149 ms —

02:47:18.257 GET 200 stylesheet 6.1 KB 150 ms —

02:47:18.258 GET 200 stylesheet 5.0 KB 161 ms —

02:47:18.260 GET 200 stylesheet 400 B 146 ms —

02:47:18.261 GET 200 stylesheet 5.9 KB 150 ms —

02:47:18.263 GET 200 stylesheet 34.0 KB 136 ms —

02:47:18.264 GET 200 stylesheet 4.9 KB 137 ms —

02:47:18.453 GET 200 script 3.6 KB 61 ms —

02:47:18.461 GET 404 img 6.0 KB 212 ms 5 alerts

02:47:18.462 GET 404 img 5.9 KB 736 ms 5 alerts

Transaction #32

Request / response

URL

GET HTTPS

https://dow-nload-ledger-live--doc.typedream.app/favicon.ico

IP / ASN

172.67.206.36

AS13335 · CLOUDFLARENET

Requested by: https://dow-nload-ledger-live--doc.typedream.app/

Resource information

File type: HTML document, ASCII text, with very long lines (6057), with no line terminators
MIME type: text/html; charset=utf-8
First seen (UTC): 19 Jun 2024 · 07:42:31.000 UTC
Last seen (UTC): 20 Oct 2026 · 21:29:20.146 UTC
Times seen: 2560

Size: 5.9 KB (6057 bytes)
MD5: 795acbbc73fe7ad9d92f31cb376327ad
SHA1: 46a62471092c80406a78ae87d6358dde23a40105
SHA256: 87130259a571a757ed569ceb091de1d057c91a5df37f516d02ff80bb77a43da6

Certificate information

Issuer: Google Trust Services · WE1
Subject: typedream.app
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 77:07:C2:67:D3:00:6F:84:CB:AE:8B:60:69:66:C9:C2:E8:E3:03:7D
Valid from: Wed, 23 Sep 2026 14:58:44 GMT
Valid until: Tue, 22 Dec 2026 15:58:29 GMT

Technology fingerprints

Google Cloud Trace (Performance)
React (JavaScript frameworks)
Google Cloud CDN (CDN)
Node.js (Programming languages)
Webpack (Miscellaneous)
Next.js (JavaScript frameworks, Web frameworks)
Cloudflare (CDN)
Google Cloud (IaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
CIRA Canadian Shield DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: dow-nload-ledger-live--doc.typedream.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://dow-nload-ledger-live--doc.typedream.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 404 
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
x-td-version: 0.116.0
x-nextjs-cache: STALE
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding
x-powered-by: Next.js
content-type: text/html; charset=utf-8
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=pHdC9af3dvrAZuqGpHp16D%2F9xZ6MJ4Gb6tkI3xeXNULHYAsmUVdySosC8Gk9cNcyVoXdM9sC6eqlbpAOFTo9yVHoNMARyaaeX0fd29tvq%2F3EzNUThEiEy%2BmEApw4zaTMEyzsO3ddWMHqle8kfZ5OpPx9Pqg30aOa8rZy"}]}
x-cloud-trace-context: cbd82a97b237e3ee971052c03867b6ea
date: Tue, 20 Oct 2026 02:47:19 GMT
server: cloudflare
priority: u=6,i=?0
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: BYPASS
content-encoding: zstd
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: a4d4b2746f92568f-OSL
server-timing: cfExtPri

02:47:18.467 GET 200 fetch 1.4 KB 30 ms 5 alerts

http://dow-nload-ledger-live--doc.typedream.app/

Domain graph

Hostnames

Connections