Security Scan: WeTransfer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/27e81db0-9817-4d56-bcb0-3da91da38891 Domain and IP registration (RDAP)/api/v1/rdap/27e81db0-9817-4d56-bcb0-3da91da38891How often this domain was scanned/api/v1/domain/stats/5paalgxwvcd3wzsglg2k6nwi.vercel.app Scan history for this domain/api/v1/domain/history/5paalgxwvcd3wzsglg2k6nwi.vercel.app?limit=15

This website contacted 13 IPs in 1 country across 9 domains to perform 12 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.5paalgxwvcd3wzsglg2k6nwi.vercel.app/

Effective URL:

https://5paalgxwvcd3wzsglg2k6nwi.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake WeTransfer download page on a .vercel.app subdomain that demands email and password to 'unlock' files; Safe Browsing flags social engineering and an inline script can forward input to a Telegram bot.

Risk Factors (5)

Impersonation of WeTransfer brand on a non-official domain

Password collection form disguised as a file-download gate

Safe Browsing Social Engineering threat detected

Telegram bot token exfiltration capability in inline script

Disposable random-string subdomain on shared hosting platform

Domain age information unavailable

Details

Page Title

WeTransfer

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'www.5paalgxwvcd3wzsglg2k6nwi.vercel.app' is registered and includes subdomain 'www.5paalgxwvcd3wzsglg2k6nwi'. Count 6 characters in 'vercel' with two vowels and four consonants. Word splitting yields 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

® Files Ready for Download 3 files, 58 MB, Transfer expires in 7 days Company_Profile.pdt Order_List.pdf 22M 12) 2 | owe 12) Specifications.mp4 aM 12) Login to Download Files Just one quick chec...

Page Load Overview

4.14s

Total Load Time

265 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:709 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business86% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

corporate business

86%

news media journalism

76%

download file sharing

73%

government public service

69%

technology software

68%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	143.204.181.118Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
0	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.127.95Google · CDN	United States	AS15169Google LLC
0	104.18.0.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	172.67.74.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	143.204.181.35Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
12	13	-	-