Security Scan Report: wetransfer991.blob.core.windows.net

Submitted: Nov 11, 2025, 10:32:08 PMCompleted: Nov 11, 2025, 10:32:43 PMpubliccompleted
Loading additional data...

Summary

This website contacted 21 IPs in 0 countries across 5 domains to perform 20 HTTP transactions. The main domain is wetransfer991.blob.core.windows.net and was registered NaN years ago.

Submitted URL: https://wetransfer991.blob.core.windows.net/file4801204839123/webm.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed phishing scam harvesting Aruba Webmail credentials

Risk Factors
Cloud storage hosting with credential collection
Brand impersonation (Webmail Aruba) on unrelated domain
Multiple login forms (3 password fields)
Unranked domain lacking legitimate reputation
Domain age information unavailable

Details

Page Title

Webmail Aruba

Scan Type

public

Language

🇮🇹

Italian

(36% confidence)

Category

unknown

(0%)

Domain Information

Within the network infrastructure generic top-level domain (.net), 'wetransfer991.blob.core.windows.net' is registered; it also runs on subdomain 'wetransfer991.blob.core'. The core label 'windows' covers 7 characters with 2 vowels and 5 consonants. Word splitting yields one word: windows. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wetransfer991.blob.core.windows.net/file4801204839123/webm.html

Page Load Overview

5.83s
Total Load Time
20
HTTP Requests
5
Domains
433 KB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:36%
Script:Latin
Direction:ltr

Detection Details

Language Code:it
Detection Confidence:36%
Script Type:Latin
HTML Lang Attribute:en
Text Length:494 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as it

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20104.17.25.14UnknownUnknown
0142.250.186.35UnknownUnknown
0104.16.174.226UnknownUnknown
0142.250.181.234UnknownUnknown
0142.250.185.163UnknownUnknown
0151.101.65.229UnknownUnknown
020.209.87.193UnknownUnknown
0151.101.129.229UnknownUnknown
0142.250.186.74UnknownUnknown
02a04:4e42:600::485UnknownUnknown
2021--

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data