Security Scan: WeTransfer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dbb7c87c-cb73-4136-85ff-87b7b053ad3a Domain and IP registration (RDAP)/api/v1/rdap/dbb7c87c-cb73-4136-85ff-87b7b053ad3aHow often this domain was scanned/api/v1/domain/stats/delinea.ar Scan history for this domain/api/v1/domain/history/delinea.ar?limit=15

This website contacted 7 IPs in 2 countries across 3 domains to perform 13 HTTP transactions. The main domain is delinea.ar.

Submitted URL: https://delinea.ar/we/index.html#[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

WeTransfer-branded credential phishing page on an unrelated domain (delinea.ar) with an email/password form posting to a local verification.php script and a victim email token in the URL fragment. Do not enter credentials.

Risk Factors (4)

Brand impersonation of WeTransfer on an unrelated, unranked domain (delinea.ar)

Credential-harvesting login form (email + password) on a non-official domain

Victim email address embedded in the URL fragment as a phishing tracking token

Form action points to an opaque local script (model/verification.php) rather than the brand's real authentication flow

Domain age information unavailable

Details

Page Title

WeTransfer

Scan Type

public

Favicon Hash

MMH3: -537232643

MD5: 692e1c7339c359b6412f059c9c9a0474

Domain Name Analysis

You're looking at domain 'delinea.ar' on the Argentine country-code top-level domain (.ar) while skipping any subdomain. Its registrable label 'delinea' stretches across 7 characters containing 4 vowels alongside three consonants. Word splitting yields three words: de, line, a. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.15s

Total Load Time

194 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:208 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network59% confidence

Type: webapp

Method: ml+structural

All Detected Categories

social media network

59%

technology software

26%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	138.219.41.153	Rosario, Santa Fe, Argentina	AS27823Dattatec.com
1	3.167.227.36Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	18.64.211.79Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	3.167.227.121Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	3.167.227.53Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	3.167.227.71Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	18.64.211.99Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
13	7	-	-