Security Scan Report: www.wetransfer-pink.vercel.app

Redirected to:
https://wetransfer-pink.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 1 country across 8 domains to perform 11 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.wetransfer-pink.vercel.app/

Effective URL:
https://wetransfer-pink.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake WeTransfer download page on a vercel.app subdomain that demands the visitor's email password to 'unlock' files; Safe Browsing social-engineering hit and phishing reports confirm credential theft.

Risk Factors (5)
Credential-harvesting login form (email + password) gated behind a fake file download
Brand impersonation of WeTransfer on an unrelated vercel.app subdomain
Google Safe Browsing social-engineering detection
Phishing threat-intel report against the primary domain
Free shared-hosting subdomain with unknown creation date and no domain reputation
Domain age information unavailable

Details

Page Title

WeTransfer

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.wetransfer-pink.vercel.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'www.wetransfer-pink'. The registrable portion 'vercel' spans 6 characters holding two vowels versus 4 consonants. Word splitting yields 2 words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.wetransfer-pink.vercel.app/

Page Load Overview

1.07s
Total Load Time
257 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Text Length:611 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business61% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
61%
download file sharing
52%
technology software
37%
documentation technical
33%
adult content
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1164.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
064.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.127.95Google · CDNUnited States
AS15169Google LLC
0104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0208.95.112.1United States
AS53334Total Uptime Technologies, LLC
0216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1112--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15BE43939A75A1C05DAABDAA9B481BE643C309D73C943C0D8F290B35D8ACF13547EDB25

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:UkTBMXfRWZEqaNuWEO1iJD5WvLPQAopoY:UCjZEqMuWEO1iJD5Wvu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:693257:CVCDDsSE6CUxIsAT4ZhIcFZGIYQAaSEKghICAORpIBkdAAAElgUKgAIYkQADgEACui5oZEYepBMgBl2JW1GKMmSIB4YhkSCk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f0f87c7cf07270f
Perceptual Hash:b33c8dcdcc33388c
Difference Hash:febc9d8cac88cafc
Wavelet Hash:1f0f0707cf070f0f
Color Hash:#79c8d2

Scan History

Scan history not available

Unable to load historical scan data