WEBSITE ANALYSIS REPORT

https://wetransfer-smoky.vercel.app/#mirensys@veltobox.net

06 Oct 2026 · 01:40:16.000 UTCpublic

Report tags: wetransfer phishing financial suspicious telegram_bot
Submit tags: openphish

Phishing detected

9 detections · review the detection signals

Review evidence →

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

3

urlquery Phishing - WeTransfer

VerdictPhishing

Severitymedium

Triggered on HTTP #2 HTTP #4 HTTP #6 HTTP #13

urlquery Phishing - WeTransfer

VerdictPhishing

Severitymedium

Triggered on HTTP #2 HTTP #4 HTTP #6 HTTP #13

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious

Severitymedium

Triggered on HTTP #6

Threat Detection Systems

6

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware

Severitymedium

Triggered on HTTP #6 JavaScript #6 JavaScript #7 JavaScript #9

Matched indicatorwetransfer-smoky.vercel.app/#mirensys@veltobox.net

Cloudflare DNS Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #2 HTTP #4 HTTP #6 HTTP #13

Matched indicatorwetransfer-smoky.vercel.app

OpenDNS Phishing Block

VerdictPhishing

Severitymedium

Triggered on HTTP #2 HTTP #4 HTTP #6 HTTP #13

Matched indicatorwetransfer-smoky.vercel.app

DNS4EU Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #2 HTTP #4 HTTP #6 HTTP #13

Matched indicatorwetransfer-smoky.vercel.app

Quad9 DNS Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #2 HTTP #4 HTTP #6 HTTP #13

Matched indicatorwetransfer-smoky.vercel.app

CIRA Canadian Shield DNS Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #2 HTTP #4 HTTP #6 HTTP #13

Matched indicatorwetransfer-smoky.vercel.app

Loading evidence…