Recent phishing
Suspicious
Impersonating WeTransfer
Intent: Persuasion
- Domain is not operated by WeTransfer
- SPF record does not reference WeTransfer's infrastructure
electronic document portal prompting for work or school email to open a protected PDF
Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 20 days ago · Oct 22, 2026, 07:50 UTC
Think this verdict is wrong?
Check a suspicious URL yourself — free to try.
Scan a URL