wct[.]airdrpsalerts[.]click

The domain wct.airdrpsalerts.click was identified as a phishing site engaged in brand impersonation, specifically targeting Google's identity. The site displayed a page title of 'Google' and was designed to deceive users by mimicking Google's branding, constituting a Google phishing scam. As of the latest assessment, wct.airdrpsalerts.click has been taken offline and is no longer accessible, but it previously posed an elevated risk to users searching for Google-related services or support, who may have questioned whether wct.airdrpsalerts.click is safe or a scam.

Technical analysis shows that wct.airdrpsalerts.click was registered through Dynadot LLC on November 04, 2025, and resolved to IP address 216.58.206.36, which is located in Germany under AS15169 Google LLC. The domain used nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. VirusTotal reports that 2 of 95 security vendors, including ChainPatrol and SOCRadar, flagged the domain as malicious. The domain appears on one security blocklist (PhishDestroy) but is not flagged by Google Safe Browsing. No SSL certificate was present.

Anyone who interacted with wct.airdrpsalerts.click should immediately change any Google account passwords entered on the site, enable two-factor authentication, and monitor accounts for signs of unauthorized activity or fraud. Users should be cautious of similar phishing attempts impersonating Google and can report suspicious domains to Google Safe Browsing or other relevant authorities to help prevent further incidents.