mywcwellness[.]reishouses[.]com

This domain is flagged as an elevated-risk credential harvesting phishing site impersonating WC Wellness, a platform for wellness professionals. Analysis indicates the site was designed to mimic legitimate training and support resources, likely to harvest login credentials or personal data from industry targets. Infrastructure analysis reveals the domain mywcwellness.reishouses.com was registered through Bluehost Inc. on November 15, 2018, and resolves to IP 162.241.218.238 (AS31898, Oracle Corporation, US). It appears on two security blocklists (PhishDestroy, PhishingDB) and is detected by 20 out of 95 security vendors on VirusTotal. The site used a Let's Encrypt SSL certificate (R12) and displayed the page title 'WC Wellness – Training, Tools, and Support for Wellness Professionals.' Current status indicates the domain has been taken offline. Mitigation steps for this specific threat type include blocking the domain and IP at network perimeter controls, revoking any cached SSL certificates associated with the domain, and alerting wellness industry personnel to verify URLs before entering credentials. Organizations should monitor for unauthorized access attempts from users who may have interacted with the site prior to takedown. Credential resets are recommended for any accounts potentially exposed to this campaign. Network logs should be reviewed for connections to 162.241.218.238 or related subdomains under reishouses.com.