other · NL
WeTransfer
WeTransfer B.V.
File-transfer service (owned by Bending Spoons since 2024); shared-file download lures.
- Primary official domain
- wetransfer.com
- Reviewed official domains
- 2 (directory review; organization has not verified)
- Directory source
- DomainSpoof directory · Suggest a correction
Matching domains, 30 days
1
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
3
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF -all · 6/10 lookups · Mail: Not checked · checked 2026-10-18 · published policy
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
Generated spellings we track
Spellings generated from this organization's official domains and brand tokens (typos, keyboard slips, lure words, look-alike characters, other top-level domains). Each one is checked against phishing feeds, certificate logs and DNS. A spelling that exists is not a finding and not a verdict: it may be unrelated, legitimate or registered defensively.
Tracked spellings
169
generated 2026-10-19; bounded dictionary, not every possible spelling
Seen in a phishing feed
0
spellings with at least one approved-source feed host on that domain
Seen in certificate logs
0
spellings with a certificate name on that domain in the logs we collect
Resolves
74
spellings that answered a DNS query; 169 of 169 checked so far
Lure word added 48 tracked · 1 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
support-wetransfer[.]com | wetransfer.com | Not observed | Not observed | Alive76.13.126.208last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
account-we[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
account-wetransfer[.]com | wetransfer.com | Not observed | Not observed | Lookup failedchecked 2026-10-19 | Not checked | Not observed |
accountwe[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
accountwetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
login-we[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
login-wetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
loginwe[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
loginwetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
secure-we[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
secure-wetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
securewe[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
securewetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
support-we[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
supportwe[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
supportwetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
update-we[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
update-wetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
updatewe[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
updatewetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
verify-we[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
verify-wetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
verifywe[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
verifywetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
we-account[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
we-login[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
we-secure[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
we-support[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
we-update[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
we-verify[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
weaccount[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
welogin[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wesecure[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wesupport[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer-account[.]com | wetransfer.com | Not observed | Not observed | Lookup failedchecked 2026-10-19 | Not checked | Not observed |
wetransfer-login[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer-secure[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer-support[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer-update[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer-verify[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransferaccount[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransferlogin[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfersecure[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfersupport[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransferupdate[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransferverify[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
weupdate[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
weverify[.]tl | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
Other top-level domain 43 tracked · 25 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
wetransfer[.]app | wetransfer.com | Not observed | Not observed | Alive76.223.54.14613.248.169.48last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetransfer[.]cc | wetransfer.com | Not observed | Not observed | Alive5.135.23.164last answered 2026-10-19 | MXSPFDMARCmail via ovh.net · checked 2026-10-19 | Observed |
wetransfer[.]co | wetransfer.com | Not observed | Not observed | Alive37.97.254.27last answered 2026-10-19 | MXSPFDMARCmail via wetransfer.co · checked 2026-10-19 | Observed |
wetransfer[.]icu | wetransfer.com | Not observed | Not observed | Alive104.21.25.10172.67.221.139last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetransfer[.]info | wetransfer.com | Not observed | Not observed | Alive13.226.94.8013.226.94.12413.226.94.12113.226.94.42last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetransfer[.]io | wetransfer.com | Not observed | Not observed | Alive13.226.94.12113.226.94.4213.226.94.12413.226.94.80last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetransfer[.]net | wetransfer.com | Not observed | Not observed | Alive13.33.67.8113.33.67.12513.33.67.8813.33.67.58last answered 2026-10-19 | MXSPFDMARCmail via google.com · checked 2026-10-19 | Observed |
wetransfer[.]online | wetransfer.com | Not observed | Not observed | Alive13.226.94.8013.226.94.12413.226.94.12113.226.94.42last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetransfer[.]org | wetransfer.com | Not observed | Not observed | Alive13.226.94.4213.226.94.12413.226.94.8013.226.94.121last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetransfer[.]shop | wetransfer.com | Not observed | Not observed | Alive76.223.54.14613.248.169.48last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetransfer[.]vip | wetransfer.com | Not observed | Not observed | Alive104.21.18.220172.67.183.104last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
we[.]app | we.tl | Not observed | Not observed | Alive43.153.222.46last answered 2026-10-19 | MXSPFDMARCmail via 163.com · checked 2026-10-19 | Observed |
we[.]biz | we.tl | Not observed | Not observed | Alive54.179.117.50last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
we[.]cc | we.tl | Not observed | Not observed | Alive43.99.104.127last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
we[.]co | we.tl | Not observed | Not observed | Alive67.199.248.1367.199.248.12last answered 2026-10-19 | MXSPFDMARCmail via google.com · checked 2026-10-19 | Observed |
we[.]help | we.tl | Not observed | Not observed | Alive185.230.63.107last answered 2026-10-19 | MXSPFDMARCmail via name.com · checked 2026-10-19 | Observed |
we[.]live | we.tl | Not observed | Not observed | Alive54.237.57.21last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
we[.]net | we.tl | Not observed | Not observed | Alive199.116.76.89last answered 2026-10-19 | MXSPFDMARCmail via google.com · checked 2026-10-19 | Observed |
we[.]org | we.tl | Not observed | Not observed | Alive104.26.4.190104.26.5.190172.67.70.5last answered 2026-10-19 | MXSPFDMARCmail via outlook.com · checked 2026-10-19 | Observed |
we[.]shop | we.tl | Not observed | Not observed | Alive192.0.78.233192.0.78.141last answered 2026-10-19 | MXSPFDMARCmail via google.com · checked 2026-10-19 | Observed |
we[.]site | we.tl | Not observed | Not observed | Alive52.20.84.62last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
we[.]support | we.tl | Not observed | Not observed | Alive52.40.42.11344.232.173.249last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
we[.]top | we.tl | Not observed | Not observed | Alive170.33.12.185last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
we[.]vip | we.tl | Not observed | Not observed | Alive170.33.12.185last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
we[.]xyz | we.tl | Not observed | Not observed | Alive15.235.207.91last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
we[.]club | we.tl | Not observed | Not observed | No address recordschecked 2026-10-19 | Not checked | Not observed |
we[.]com | we.tl | Not observed | Not observed | No address recordschecked 2026-10-19 | Not checked | Not observed |
we[.]icu | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
we[.]info | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
we[.]io | we.tl | Not observed | Not observed | No address recordschecked 2026-10-19 | Not checked | Not observed |
we[.]me | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
we[.]online | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
we[.]store | we.tl | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer[.]biz | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer[.]club | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer[.]help | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer[.]live | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer[.]me | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer[.]site | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer[.]store | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer[.]support | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer[.]top | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfer[.]xyz | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
Look-alike characters (ASCII) 1 tracked · 1 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
vvetransfer[.]com | wetransfer.com | Not observed | Not observed | Alive213.154.246.182last answered 2026-10-19 | MXSPFDMARCmail via vvetransfer.com · checked 2026-10-19 | Observed |
Look-alike characters (internationalized) 3 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
wetransfеr[.]comxn--wetransfr-n0h[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetrаnsfer[.]comxn--wetrnsfer-3yh[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wеtransfer[.]comxn--wtransfer-g0h[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
Character omitted 10 tracked · 10 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
wetransfr[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.238last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetrasfer[.]com | wetransfer.com | Not observed | Not observed | Alive157.90.33.74157.90.33.73last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetrnsfer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.212.100last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wtransfer[.]com | wetransfer.com | Not observed | Not observed | Alive3.33.130.19015.197.148.33last answered 2026-10-19 | MXSPFDMARCmail via pphosted.com · checked 2026-10-19 | Observed |
etransfer[.]com | wetransfer.com | Not observed | Not observed | Alive40.121.216.66last answered 2026-10-19 | MXSPFDMARCmail via ppe-hosted.com · checked 2026-10-19 | Observed |
weransfer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.238last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetansfer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.250last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetranfer[.]com | wetransfer.com | Not observed | Not observed | Alive157.90.33.74157.90.33.73last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetranser[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.217last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetransfe[.]com | wetransfer.com | Not observed | Not observed | Alive157.90.33.73157.90.33.74last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
Characters swapped 9 tracked · 5 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
wetransfre[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.212.235last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetrasnfer[.]com | wetransfer.com | Not observed | Not observed | Alive199.193.114.101last answered 2026-10-19 | MXSPFDMARCmail via emailofsteel.com · checked 2026-10-19 | Observed |
wetrnasfer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.241last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetarnsfer[.]com | wetransfer.com | Not observed | Not observed | Alive144.76.59.138last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetranfser[.]com | wetransfer.com | Not observed | Not observed | Alive45.33.83.10045.79.167.18066.175.209.17996.126.111.165last answered 2026-10-19 | MXSPFDMARCmail via mailerhost.net · checked 2026-10-19 | Observed |
ewtransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wertansfer[.]com | wetransfer.com | Not observed | Not observed | Lookup failedchecked 2026-10-19 | Not checked | Not observed |
wetransefr[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wteransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
Character repeated 10 tracked · 9 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
wetransferr[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.240last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetransffer[.]com | wetransfer.com | Not observed | Not observed | Alive144.76.59.138last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetrransfer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.253last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wettransfer[.]com | wetransfer.com | Not observed | Not observed | Alive172.237.146.18172.237.146.39172.237.146.46last answered 2026-10-19 | MXSPFDMARCmail via hostedmxserver.com · checked 2026-10-19 | Observed |
wwetransfer[.]com | wetransfer.com | Not observed | Not observed | Alive172.98.192.102last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
weetransfer[.]com | wetransfer.com | Not observed | Not observed | Alive45.33.83.10096.126.111.16566.175.209.17945.79.167.180last answered 2026-10-19 | MXSPFDMARCmail via mailerhost.net · checked 2026-10-19 | Observed |
wetraansfer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.253last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetrannsfer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.212.228last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetransfeer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.239last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetranssfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
Vowel changed 12 tracked · 5 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
wetransfur[.]com | wetransfer.com | Not observed | Not observed | Alive77.163.241.126last answered 2026-10-19 | MXSPFDMARCmail via mijn.host · checked 2026-10-19 | Observed |
wetrensfer[.]com | wetransfer.com | Not observed | Not observed | Alive199.191.50.184last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
witransfer[.]com | wetransfer.com | Not observed | Not observed | Alive66.175.209.17945.33.83.10096.126.111.16545.79.167.180last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wutransfer[.]com | wetransfer.com | Not observed | Not observed | Alive13.223.25.8454.243.117.197last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
watransfer[.]com | wetransfer.com | Not observed | Not observed | Alive199.191.50.184last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetransfar[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfir[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfor[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetrinsfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetronsfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetrunsfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wotransfer[.]com | wetransfer.com | Not observed | Not observed | No address recordschecked 2026-10-19 | Not checked | Not observed |
Adjacent key typo 33 tracked · 18 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
wetransfet[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.212.105last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetransfrr[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.241last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetransfwr[.]com | wetransfer.com | Not observed | Not observed | Alive15.197.204.563.33.243.145last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetransger[.]com | wetransfer.com | Not observed | Not observed | Alive144.76.59.138last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetrsnsfer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.212.223last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wettansfer[.]com | wetransfer.com | Not observed | Not observed | Alive144.76.59.138last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
weyransfer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.252last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wrtransfer[.]com | wetransfer.com | Not observed | Not observed | Alive54.243.117.19713.223.25.84last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wwtransfer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.247last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
setransfer[.]com | wetransfer.com | Not observed | Not observed | Alive76.223.54.14613.248.169.48last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
werransfer[.]com | wetransfer.com | Not observed | Not observed | Alive199.191.50.184last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
weteansfer[.]com | wetransfer.com | Not observed | Not observed | Alive104.247.81.99last answered 2026-10-19 | MXSPFDMARCmail via h-email.net · checked 2026-10-19 | Observed |
wetrabsfer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.241last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetramsfer[.]com | wetransfer.com | Not observed | Not observed | Alive199.191.50.184last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetranafer[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.182.241last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetrandfer[.]com | wetransfer.com | Not observed | Not observed | Alive15.197.204.563.33.243.145last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
wetransder[.]com | wetransfer.com | Not observed | Not observed | Alive103.224.212.229last answered 2026-10-19 | MXSPFDMARCmail via above.com · checked 2026-10-19 | Observed |
wetransfee[.]com | wetransfer.com | Not observed | Not observed | Alive15.197.204.563.33.243.145last answered 2026-10-19 | MXSPFDMARCchecked 2026-10-19 | Observed |
eetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
qetransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wdtransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wegransfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetfansfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetrahsfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetrajsfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetranscer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfdr[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransfef[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetransrer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetranwfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetranzfer[.]com | wetransfer.com | Not observed | Not observed | Lookup failedchecked 2026-10-19 | Not checked | Not observed |
wetrqnsfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
wetrznsfer[.]com | wetransfer.com | Not observed | Not observed | Does not resolvechecked 2026-10-19 | Not checked | Not observed |
Last feed and certificate-log check 2026-10-19 05:45 UTC. “Not observed” means none of our checks has seen the spelling; it is not proof the name is unregistered. An observed spelling is not a finding: reported abuse appears only under Reported matches, from independent source evidence. Feed presence counts hosts from approved sources only; certificate presence comes from the public logs described on the Certificates tab; DNS checks cover the apex name and are refreshed on a schedule. Mail (MX, SPF, DMARC) is checked only for spellings observed somewhere; mail records show the domain can send or receive mail; they do not show who operates it.