wct[.]hub-airdropalert[.]click

This domain, wct.hub-airdropalert.click, poses a specific threat of brand impersonation targeting Google. The domain was designed to deceive users into believing it is an official Google service, potentially leading to the disclosure of sensitive information such as login credentials, personal data, or financial details. Such impersonation can lead to significant security risks, including identity theft, financial loss, and unauthorized access to user accounts.

Infrastructure analysis reveals that wct.hub-airdropalert.click was registered through Dynadot LLC and created on November 9, 2025. The domain resolves to the IP address 142.250.185.100, which is located in the United States and is part of the AS15169 Google LLC network. Despite this, the domain does not possess a valid SSL certificate, which is a common indicator of a legitimate website. Security assessments indicate that 11 out of 95 security vendors on VirusTotal have flagged this domain. Additionally, the domain appears on one security blocklist, specifically PhishDestroy, further emphasizing its suspicious nature.

If users have visited this domain, it is crucial to take immediate action to protect their accounts and personal information. They should change their Google passwords and enable two-factor authentication (2FA) to add an extra layer of security. Users should also monitor their account activity for any unauthorized changes or logins. If any suspicious activity is detected, they should report it to Google immediately. It is recommended to use official Google channels for any authentic services and to be wary of unsolicited links or emails claiming to be from Google.