wct[.]stakingsrewards[.]club

This domain, wct.stakingsrewards.club, is flagged for brand impersonation activity targeting Gmail, a widely recognized email service provider. Analysis indicates the site masquerades as a legitimate Google login portal, as evidenced by the page title 'Google' and the domain's infrastructure designed to deceive users into disclosing credentials. No direct evidence of a crypto drainer kit was observed, but the credential theft mechanism aligns with common phishing tactics employed in account takeover schemes. Infrastructure analysis reveals the domain was registered on February 21, 2026, a future date that suggests potential domain spoofing or incorrect WHOIS records. It resolves to the IP address 142.250.217.4, which is geolocated in the United States under AS15169 (Google LLC), a likely attempt to lend credibility to the operation. Detection metrics indicate the domain appears on one security blocklist, while VirusTotal reports 14 out of 95 security vendors flagging it as malicious. The SSL certificate is classified as WR2, a low-reliability indicator often associated with short-lived or disposable certificates. Google Safe Browsing (GSB) status is not explicitly provided, but the detection count suggests partial coverage by major security frameworks. As of the latest assessment, wct.stakingsrewards.club has been taken offline, likely in response to security vendor detection and blocklisting. However, the elevated risk level persists due to the domain's recent creation timeline and the potential for infrastructure reuse. Users who may have interacted with the site are advised to rotate credentials immediately, enable multi-factor authentication, and monitor accounts for unauthorized activity. Organizations should update blocklists to include this domain and its associated IP, while security teams should investigate potential lateral movement risks if credentials were compromised.