mywcwellness[.]com

This domain, mywcwellness.com, is flagged as a generic phishing site designed to harvest credentials under the guise of a wellness training and support platform. Analysis indicates no direct association with a known brand or drainer kit, but the page title, 'WC Wellness – Training, Tools, and Support for Wellness Professionals,' suggests an attempt to impersonate legitimate professional development resources. The infrastructure mimics corporate wellness portals, likely targeting employees or independent contractors in the wellness industry to extract login credentials or personal data. Infrastructure analysis reveals the domain was registered on October 27, 2018, through Bluehost Inc. and resolves to the IP address 162.241.218.238, hosted on AS31898 (Oracle Corporation) in the United States. The SSL certificate is issued by DigiCert Inc (GeoTrust TLS RSA CA G1), a common practice among phishing sites to appear legitimate. VirusTotal detection shows 20 out of 95 security vendors flagging the domain, while it appears on two security blocklists. No Google Safe Browsing (GSB) hits are recorded in the provided data, though this may reflect delayed reporting rather than absence of malicious activity. The domain is currently offline, having been taken down following detection and blocking by multiple security feeds. Despite its inactive status, residual risk remains due to the potential reuse of infrastructure or registration details for future phishing campaigns. Organizations are advised to monitor for related domains using the same registrar, IP range, or SSL issuer. End-users who interacted with the site should reset credentials for any accounts accessed during the exposure window and enable multi-factor authentication where available. Network-level blocking of the IP 162.241.218.238 is recommended as a precautionary measure.