Security Scan: WeTransfer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ea9da0db-9dc7-495e-a3ea-6b23d43e9791 Domain and IP registration (RDAP)/api/v1/rdap/ea9da0db-9dc7-495e-a3ea-6b23d43e9791How often this domain was scanned/api/v1/domain/stats/supprtrcb-dpldxysyz96q.edgeone.dev Scan history for this domain/api/v1/domain/history/supprtrcb-dpldxysyz96q.edgeone.dev?limit=15

This website contacted 8 IPs in 2 countries across 7 domains to perform 8 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://supprtrcb-dpldxysyz96q.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

WeTransfer-branded credential phishing on a disposable edgeone.dev subdomain: a fake 'files ready to download' page demands email and password, and an embedded Telegram bot token can ship the stolen credentials to the attacker.

Risk Factors (6)

Brand impersonation of WeTransfer on a non-official domain

Credential-harvesting login form (email + password) gated behind a fake file download

Telegram bot token in page script — direct exfiltration channel for submitted credentials

Fabricated file listing and 7-day expiry countdown as social-engineering pressure

Free instant-subdomain hosting (edgeone.dev) with unknown creation date, typical of throwaway phishing infrastructure

Visitor IP/geo lookup via ip-api.com from page JavaScript

Domain age information unavailable

Details

Page Title

WeTransfer

Scan Type

public

Domain Name Analysis

The domain name 'supprtrcb-dpldxysyz96q.edgeone.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'supprtrcb-dpldxysyz96q'. The second-level label 'edgeone' is 7 characters long containing 4 vowels alongside 3 consonants. Tokenizing the label suggests 2 words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

® Files Ready for Download 3 files, 36.21 MB, Transfer expires in 7 days Company_Profile.pdt @ [R) | Order_List-764833.pat @ 421MB 5MB Specifications.mp4 27M 12) Login to Download Files Just one...

Page Load Overview

1.32s

Total Load Time

249 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:60%

Script:Latin

Direction:ltr

Detection Details

Text Length:612 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business62% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

corporate business

62%

download file sharing

53%

technology software

36%

documentation technical

31%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	43.174.246.29	Singapore	AS139341ACE
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.1.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	208.95.112.1	United States	AS53334Total Uptime Technologies, LLC
1	104.18.0.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	8	-	-