wetransfer.net

Observed 2026-07-13T00:00:08.630Z (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding

Runs onCloudflare

Email byGoogle Workspace

Also usesGoogle Search Console

96 subdomains · tranco_10k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat wetransfer.net actually stands on - every host below is a signed observation

wetransfer.net

A / AAAA

18.238.176.1418.238.176.9018.238.176.7018.238.176.69

Cloudflareserves the site

ns-1812.awsdns-34.co.ukns-1111.awsdns-10.orgns-222.awsdns-27.comns-948.awsdns-54.net

awsdns-34.co.uk + awsdns-10.org + moreanswers its DNS

alt3.aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt4.aspmx.l.google.com+1 more

Google Workspacereceives its email

HTTPS probe

server_error Server error (5xx) 525 Server Error

HTTP status525

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time184 ms

DNS resolutionNOERROR

MCP This domain advertises an AI service endpoint at _mcp._tcp.

heritage=external-dns,external-dns/owner=prod/public,external-dns/resource=ingress/default/frontend-api

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 4

18.238.176.14
18.238.176.90
18.238.176.70
18.238.176.69

MX 5

10alt3.aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com
10alt4.aspmx.l.google.com
1aspmx.l.google.com

TXT 5

v=spf1 -all
google-site-verification=AapWG2hT4NFvLmBHr-vCbSHlRHfG5EoIg7t0xp6FD0Y
v=DMARC1; p=reject; rua=mailto:reports@dmarc.bendingspoons.com; pct=100;
v=DKIM1; (detected)
heritage=external-dns,external-dns/owner=prod/public,external-dns/resource=ingress/default/frontend-api

NS 4

ns-1812.awsdns-34.co.uk
ns-1111.awsdns-10.org
ns-222.awsdns-27.com
ns-948.awsdns-54.net

SOA 1

ns-948.awsdns-54.net awsdns-hostmaster.amazon.com

CAA 2

issue amazon.com
iodef mailto:domains@wetransfer.com

TLS Certificates (0)

None.

Subdomains (96)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for wetransfer.net. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/wetransfer.net">
  <img src="https://domaindrift.io/badge/wetransfer.net.svg"
       width="300" height="64" alt="DomainDrift signed observations for wetransfer.net">
</a>

Ed25519 Receipt

Receipt ID: 2c0ae689-1e46-49ec-b718-030eba239818
Output Hash: 7fc73e2598cbad7dfb950c58a4bd6aba12ed068e4ec1ddcf8c69f81e0886766e
Signature: ed25519:655b39240fa01b75bc177dea0c8c4e4390d3a383c839940e8d77d414184195640795fb3e41154d1e7dac0dd2013c8babecaaf494dfdf4e99d3c8258e7ef05708
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/wetransfer.net