Security Scan: WeTransfer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/516247aa-d0f0-4dc2-90fc-701dbe076d5b Domain and IP registration (RDAP)/api/v1/rdap/516247aa-d0f0-4dc2-90fc-701dbe076d5b Certificate Transparency/api/v1/ct/wetransfer-east856-dppejjz76yzz.edgeone.dev How often this domain was scanned/api/v1/domain/stats/wetransfer-east856-dppejjz76yzz.edgeone.dev Scan history for this domain/api/v1/domain/history/wetransfer-east856-dppejjz76yzz.edgeone.dev?limit=15

This website contacted 3 IPs in 3 countries across 3 domains to perform 20 HTTP transactions. The main domain is wetransfer-east856-dppejjz76yzz.edgeone.dev and was registered 4 months ago.

Submitted URL: http://wetransfer-east856-dppejjz76yzz.edgeone.dev/

Effective URL:

https://wetransfer-east856-dppejjz76yzz.edgeone.dev/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Fake WeTransfer page on a free-hosting subdomain impersonating the brand and harvesting email/password, submitting credentials cross-origin to a domain flagged as asyncrat malware. Confirmed phishing.

Risk Factors

Brand impersonation of WeTransfer on a mismatched free-hosting subdomain (edgeone.dev) that is not WeTransfer's official domain

Credential-bearing submission routed cross-origin to pl.tjadae.net/confirm.php, a domain reported as asyncrat malware

ET PHISHING mirrored-website IDS alerts

Domain unranked in Cisco Umbrella with no legitimate reputation; hosting subdomain creation date unknown

Lure content mimicking a business email thread with fake attachments (PDF/ZIP/MP4)

Domain age information unavailable

Details

Page Title

WeTransfer

Scan Type

public

Favicon Hash

MMH3: -537232643

MD5: 692e1c7339c359b6412f059c9c9a0474

Domain Name Analysis

You're looking at domain 'wetransfer-east856-dppejjz76yzz.edgeone.dev' on the developer-focused generic top-level domain (.dev) with subdomain 'wetransfer-east856-dppejjz76yzz'. Its registrable label 'edgeone' stretches across 7 characters split between 4 vowels and three consonants. Segmentation suggests 2 words: edge, one. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.00s

Total Load Time

973 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:473 chars

Detector Agreement:100%

Website Classification

Primary Category

download file sharing54% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

download file sharing

54%

technology software

43%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	212.227.90.29	Spain	AS8560IONOS SE
6	43.174.247.29	Singapore	AS139341ACE
6	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
20	3	-	-