delvaie[.]com

The domain delvaie.com poses a high-risk threat as it masquerades as a WeTransfer login page, aiming to steal user credentials. This domain is active and configured to deceive users into submitting sensitive information, leveraging a fraudulent replica of a legitimate service's interface.

Technical analysis reveals that delvaie.com was registered through OwnRegistrar, Inc. and resolves to IP address 159.195.47.52. The domain was created on April 28, 2025, indicating a recent setup potentially designed for short-term malicious campaigns. It employs a Let's Encrypt SSL certificate which might give an illusion of security but does not verify the legitimacy of the domain. On VirusTotal, 12 out of 95 security vendors have flagged this domain as malicious, further confirming its phishing nature.

Users who have interacted with delvaie.com should immediately change their passwords on any potentially compromised accounts and monitor for unusual activities. It is advisable to report this site to relevant security platforms and organizations to enhance detection and prevention efforts. Ensuring the use of multi-factor authentication can mitigate risks of unauthorized access, even if credentials have been compromised.