WEBSITE ANALYSIS REPORT

http://sso-coinbase-com-cdn-x--auth.typedream.app/

16 Oct 2026 · 06:18:52.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:16:57.381 GET 404 document 5.9 KB 276 ms 4 alerts

06:16:57.785 GET 301 document 0 B 16 ms 4 alerts

06:16:57.807 GET 404 document 5.9 KB 686 ms 4 alerts

06:16:58.600 GET 200 stylesheet 161.7 KB 721 ms 4 alerts

06:16:58.604 GET 200 script 8.3 KB 13 ms 4 alerts

06:16:58.613 GET 200 script 160.1 KB 867 ms 4 alerts

06:16:58.615 GET 200 script 108.3 KB 264 ms 4 alerts

06:16:58.825 GET 200 script 519 B 267 ms 4 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://sso-coinbase-com-cdn-x--auth.typedream.app/_next/static/chunks/main-app-03612bcc77c19215.js

IP / ASN

104.21.37.85

AS13335 · CLOUDFLARENET

Requested by: https://sso-coinbase-com-cdn-x--auth.typedream.app/

Resource information

File type: ASCII text, with very long lines (519), with no line terminators
MIME type: application/javascript; charset=UTF-8
First seen (UTC): 01 Feb 2024 · 09:20:28.000 UTC
Last seen (UTC): 18 Oct 2026 · 10:59:56.824 UTC
Times seen: 412

Size: 519 B (519 bytes)
MD5: 1c67a6ab0165e75f5b3d733e8d9e455b
SHA1: 82f63681e756823e94b70c1fef1fa7ce1ff63090
SHA256: 43c9555d4cfd69f405e458370c806b608ddcb0d01fb251fe18c860dbfa7c930b

Certificate information

Issuer: Google Trust Services · WE1
Subject: typedream.app
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 77:07:C2:67:D3:00:6F:84:CB:AE:8B:60:69:66:C9:C2:E8:E3:03:7D
Valid from: Wed, 23 Sep 2026 14:58:44 GMT
Valid until: Tue, 22 Dec 2026 15:58:29 GMT

Technology fingerprints

Cloudflare (CDN)
Google Cloud Trace (Performance)
Google Cloud (IaaS)
Google Cloud CDN (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /_next/static/chunks/main-app-03612bcc77c19215.js HTTP/1.1
Host: sso-coinbase-com-cdn-x--auth.typedream.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://sso-coinbase-com-cdn-x--auth.typedream.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
x-td-version: 0.116.0
cache-control: public, max-age=31536000, immutable
priority: u=3,i=?0
last-modified: Thu, 06 Jun 2024 04:00:17 GMT
etag: W/"207-18febb45c68"
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
x-cloud-trace-context: 59704744a3fde895c42c936c6e053dcb
date: Fri, 16 Oct 2026 06:16:59 GMT
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=n43JhSdiQQkO82MIUqCleJQ4SkU%2Bmi2MYtTS5zkYRJ4nW%2BHhaqzB3Ug8kEmUi8QbIyVW3kHac%2Bb060mofY6sBGQ6oFxCp%2Fq0VQc0fT66W%2FufJVOafirSIF0dDjVhzkIqiNU6c7D47Gqng9U6NL%2F4lsp4EBCK2rngDSf8UJ8%3D"}]}
content-encoding: zstd
cf-ray: a4b4f017ac053181-OSL
server-timing: cfExtPri

06:16:58.827 GET 200 stylesheet 22.7 KB 38 ms —

06:16:59.486 GET 404 img 5.9 KB 266 ms 4 alerts

http://sso-coinbase-com-cdn-x--auth.typedream.app/

Domain graph

Hostnames

Connections