Security Scan Report: bright-secure-blokf-com-authd.typedream.app

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 4 domains to perform 64 HTTP transactions. The main domain is typedream.app and was registered 5 years ago.

Submitted URL: https://bright-secure-blokf-com-authd.typedream.app

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Phishing page on a Typedream subdomain impersonating BlockFi (and naming Coinbase Pro in its title) with a deceptive auth-style hostname; corroborated by two threat-intel feeds. Do not enter credentials.

Risk Factors (6)
Content-malware (phishing) threat-intel match on the scanned primary domain, corroborated by two independent feeds
Brand impersonation of BlockFi on a non-official domain
Second brand (Coinbase Pro) falsely asserted in the page title while the body is about BlockFi
Deceptive/confusable hostname mimicking a BlockFi authentication URL
Free instant-publishing platform subdomain used to host the impersonation page
Page text coaches users to submit email addresses and passwords
Domain age information unavailable

Details

Page Title

Log In | Coinbase Pro® | Digital Asset Exchange*

Scan Type

public

Domain Name Analysis

The domain 'bright-secure-blokf-com-authd.typedream.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'bright-secure-blokf-com-authd'. The core label 'typedream' covers 9 characters holding 3 vowels versus 6 consonants. It segments into 2 words: type, dream. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bright-secure-blokf-com-authd.typedream.app

Page Load Overview

2.45s
Total Load Time
910 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:47%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,290 chars
Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain91% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
91%
technology software
73%
finance banking
36%
phishing scam
31%
cryptocurrency
30%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.18.14.90Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.14.95Google · CDNUnited States
AS15169Google LLC
8104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.18.15.90Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.13.95Google · CDNUnited States
AS15169Google LLC
8104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
648--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10F253329331B6900D2FB8DE330CF3A06780458357AB545AFD9190DD8CAEE56BD3A974B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:P2EAcHyZ4EqQV8dqYEOjYRFMUScA62OGiywAmAeCoRo6kPcqIlwKIcMIAzuE6gKn:K

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1052589:kVhAhZhGrBEOMwAUAYKBMMAIKRGWV1JZSAs4BQKKsMgIHFSKIkICYk4BD0HgsoMVk4AHwoy0gbOZjAowwVAmDCYAKaIUBmAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3c3efffffff
Perceptual Hash:b034cecbcb8cce8a
Difference Hash:969696969e1c1e0c
Wavelet Hash:c3c3c3c3c3c3c3c6
Color Hash:#3a784e

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data