wechatcorp[.]net

The domain wechatcorp.net is a brand impersonation phishing site that mimics the appearance of Google. This domain poses a significant risk as it attempts to deceive users into believing they are interacting with a legitimate Google service, potentially leading to the theft of sensitive information. The site has been taken offline, reducing the immediate threat, but caution is advised as the domain may be reactivated.

wechatcorp.net has been flagged by 3 of 95 VirusTotal vendors, including CRDF and Gridinsoft, which have assigned it a trust score of 0/100. The domain is registered through Web Commerce Communications Limited and was created on September 16, 2025. It resolves to the IP address 188.114.96.3, which is located in the US and is part of AS13335 Cloudflare, Inc. The domain appears on 1 security blocklist, specifically PhishDestroy, and does not have an SSL certificate. The page title observed was 'WeChat - Free messaging and calling app', which is inconsistent with the impersonated brand.

If a user has interacted with wechatcorp.net, they should immediately change their Google account passwords and enable two-factor authentication (2FA) to secure their accounts. Users should also monitor their accounts for any signs of unauthorized activity or fraud. To help prevent further spread of this scam, users can report the domain to Google and other security organizations. Additionally, they should inform their contacts about the phishing attempt to avoid similar incidents.