Security Scan: WeTransfer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2a6349a6-1586-469d-a3cb-503fa61e5b46 Domain and IP registration (RDAP)/api/v1/rdap/2a6349a6-1586-469d-a3cb-503fa61e5b46How often this domain was scanned/api/v1/domain/stats/teal-naiad-629295.netlify.app Scan history for this domain/api/v1/domain/history/teal-naiad-629295.netlify.app?limit=15

This website contacted 17 IPs in 3 countries across 11 domains to perform 28 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://teal-naiad-629295.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

WeTransfer-branded credential phishing on a netlify.app subdomain: a fake expiring file transfer demands your email password to download, and page script can ship what you type to Telegram. Safe Browsing flags it.

Risk Factors (5)

Brand impersonation of WeTransfer on a mismatched, unranked hosting subdomain

Password field harvests the victim's email account credentials under a fake 'quick check' pretext

Telegram-bot exfiltration channel embedded in inline page script

Safe Browsing social-engineering classification

Urgency lure (transfer expires in 7 days) and fake file listing to pressure the victim

Domain age information unavailable

Details

Page Title

WeTransfer

Scan Type

public

Favicon Hash

MMH3: -537232643

MD5: 692e1c7339c359b6412f059c9c9a0474

Domain Name Analysis

You're looking at domain 'teal-naiad-629295.netlify.app' on the application-focused generic top-level domain (.app) with subdomain 'teal-naiad-629295'. The second-level label 'netlify' is 7 characters long containing two vowels alongside five consonants. Splitting it apart reveals three words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.18s

Total Load Time

403 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:685 chars

Detector Agreement:100%

Website Classification

Primary Category

download file sharing71% confidence

Type: spa

Method: ml+structural

All Detected Categories

download file sharing

71%

documentation technical

32%

corporate business

31%

technology software

26%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	45.43.142.3	United Kingdom	AS16276OVH SAS
1	3.174.46.11Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	104.18.1.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	63.250.43.129	United States	AS22612Namecheap, Inc.
1	172.67.74.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
28	17	-	-