GrizzlyGrizzly
Recent phishing
Phishing

Impersonating WeTransfer

Intent: Persuasion

  • Domain is not operated by WeTransfer
  • Domain was registered very recently
  • SPF record does not reference WeTransfer's infrastructure

fake document access page for a PDF, asking for work or school email to open it

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 25 days ago · Oct 17, 2026, 07:36 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: www.italiacompanyservice-wetransfer.theschiteas.com — Grizzly