Security Scan: WeTransfer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/96cbb8e5-657c-4928-83dd-a7107352a46e Domain and IP registration (RDAP)/api/v1/rdap/96cbb8e5-657c-4928-83dd-a7107352a46eHow often this domain was scanned/api/v1/domain/stats/1619a6a6.dffeefaaw.pages.dev Scan history for this domain/api/v1/domain/history/1619a6a6.dffeefaaw.pages.dev?limit=15

This website contacted 2 IPs in 1 country across 3 domains to perform 8 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://1619a6a6.dffeefaaw.pages.dev/dlivery

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Fake WeTransfer download page on a pages.dev subdomain, flagged by Safe Browsing for social engineering and collecting email plus password. Phishing; do not enter credentials.

Risk Factors (5)

Brand impersonation of WeTransfer on a domain that is not wetransfer.com

Password/credential field present on a page imitating a file-transfer service's download flow

Google Safe Browsing Social Engineering detection (2 instances)

Lure content (urgent deletion countdown, purchase list, company documents) designed to rush victims

Free hosting subdomain with unknown creation date and no domain reputation

Domain age information unavailable

Details

Page Title

WeTransfer

Scan Type

public

Favicon Hash

MMH3: -537232643

MD5: 692e1c7339c359b6412f059c9c9a0474

Domain Name Analysis

Domain '1619a6a6.dffeefaaw.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain '1619a6a6.dffeefaaw'. Count 5 characters in 'pages' containing 2 vowels alongside three consonants. Segmentation suggests 1 word: pages. The median word length lands at five characters. No strong language cues emerged from the frequency lists.