Recent phishing
Phishing
Impersonating WeTransfer
Intent: Credential collection
- Domain is not operated by WeTransfer
- Domain was registered very recently
Aruba Webmail login page with email and password fields to access webmail
Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 42 days ago · Sep 30, 2026, 06:47 UTC
Think this verdict is wrong?
Check a suspicious URL yourself — free to try.
Scan a URL