wct[.]stakingsreward[.]art

This domain, wct.stakingsreward.art, was identified as a credential phishing site targeting Google users, with infrastructure analysis revealing its creation on February 21, 2026. The page title 'Google' aligns with the reported brand impersonation, though the exact content of the phishing page has not been analyzed. The domain is currently offline, having been taken down following detection by security vendors. It appeared on at least one security blocklist, specifically PhishDestroy, and was flagged by 11 of 93 security vendors on VirusTotal, indicating broad recognition as malicious.

The domain resolved to the IP address 172.253.62.105, which is registered to AS15169 (Google LLC) in the United States. However, this IP association does not confirm legitimate hosting, as threat actors may exploit cloud infrastructure for malicious purposes. The SSL certificate was classified as WR2, suggesting potential irregularities or low trustworthiness. Gridinsoft assigned a trust score of 0/100, further supporting the malicious classification.

Defenders should treat this domain as confirmed phishing infrastructure, particularly given its alignment with credential theft targeting Google. While the domain is offline, organizations should monitor for re-registration or re-emergence under similar naming conventions. Historical DNS and WHOIS records may provide additional context for tracking related campaigns. No evidence links this domain to broader phishing kits or additional scam categories beyond credential harvesting.