GrizzlyGrizzly
Recent phishing
Phishing

Impersonating WeTransfer

Intent: Data collection

  • Domain is not operated by WeTransfer
  • Domain name closely resembles WeTransfer's real domain
  • TLS certificate was issued very recently
  • SPF record does not reference WeTransfer's infrastructure

login page with email/username and password input fields for user sign-in

Scanned 83 days ago · Jul 8, 2026, 18:16 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: wetransfer.figecal.fr — Grizzly