wetransfer-file1-gg9y[.]vercel[.]app

This domain, wetransfer-file1-gg9y.vercel.app, is a phishing site designed to mimic legitimate file-sharing services. Victims who visit the page are typically tricked into entering sensitive information, such as login credentials or financial details, under the guise of accessing a shared document or file. The site may also prompt users to download malicious software disguised as a necessary plugin or update. Given the high-risk classification, interaction with this domain poses a significant threat of data theft, account compromise, or malware infection. Analysis indicates this domain is part of a broader phishing infrastructure. It was registered on February 21, 2026, through Tucows Domains Inc., a registrar frequently abused for malicious activity. The domain currently resolves to the IP address 216.198.79.195 and is flagged by 16 out of 95 security vendors on VirusTotal, a clear indicator of its malicious nature. The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the risk, as phishing sites commonly use valid certificates to appear legitimate. Additionally, the page title 'Deployment Unavailable' suggests the site may be hosted on a compromised or misconfigured platform, further obscuring its true intent. If you or someone else has visited wetransfer-file1-gg9y.vercel.app, immediate action is required to mitigate potential damage. First, disconnect the affected device from the internet to prevent further data exfiltration or malware communication. Run a full system scan using up-to-date antivirus or endpoint protection tools to detect and remove any malicious payloads. If login credentials or financial information were entered, change passwords immediately for all affected accounts, prioritizing email and banking services. Enable multi-factor authentication where possible to add an extra layer of security. Monitor accounts for unauthorized activity and report any suspicious transactions to the relevant financial institution. Finally, report the domain to your organization's security team or a trusted threat intelligence platform to aid in broader mitigation efforts.