Report Overview
Visitedpublic
2026-04-09 13:29:04
Submit Tags
URL
wetransfer0.uk/
Finishing URL
wetransfer0.uk/
IP / ASN
35.157.26.135
Title
WeTransfer
Phishing - WeTransfer
Suspicious - Suspicious Javascript code
Detections
urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
img.icons8.com | 218854 | 2011-10-04 | 2017-05-26 | 2026-04-02 | 1.8 kB | 5.1 kB |  185.76.9.11 |  |
wetransfer0.uk 10 alert(s) on this Host | unknown | 2026-04-08 | 2026-04-09 | 2026-04-09 | 918 B | 17 kB | 35.157.26.135 |  |
images.unsplash.com | 86676 | 2013-05-29 | 2015-08-06 | 2026-04-08 | 493 B | 382 kB |  151.101.66.208 |
CDN77 (CDN)
CDN77 is a content delivery network (CDN).Netlify (PaaS, CDN)
Netlify providers hosting and server-less backend services for web applications and static websites.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | wetransfer0.uk/ | malware | Detects file containing Telegram Bot API |
| DigiCert UltraDNS | wetransfer0.uk | malicious | Sinkholed |
| Cloudflare DNS | wetransfer0.uk | malicious | Sinkholed |
| CIRA Canadian Shield DNS | wetransfer0.uk | malicious | Sinkholed |
Telegram Bot detected (1)
URL
wetransfer0.uk/
IP / ASN
35.157.26.135
Token
8631622354:AAGyO-JDFqnXzgdZdI3lyKspnsSDVcMkYGY
Bot Overview
User ID8631622354
UsernameKendo_Marv_bot
First NameKendo
Last NameN/A
Chat Info
Chat ID6834228020
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0
JavaScript (1)
No JavaScripts
HTTP Transactions (7)
| URL | IP | Response | Size |
|---|