wct[.]stakingreward[.]app

PhishDestroy identifies wct.stakingreward.app as a confirmed brand impersonation phishing site that specifically targets Gmail users. The domain is currently offline, but while active it posed a significant threat by mimicking the Google login page to steal credentials. This domain was created on December 27, 2025, through registrar Dynadot LLC, and resolves to IP address 142.250.185.228. It was flagged by 15 of 95 VirusTotal security vendors, indicating a moderate detection rate, and appears on one security blocklist. Notably, the site had no SSL certificate, which is a red flag for any login page. The page title was simply "Google," furthering the impersonation attempt. The domain's elevated risk level stems from its direct targeting of a widely used email service, making it a potent tool for credential harvesting. Users who may have encountered this site should immediately change their Gmail passwords and enable two-factor authentication. PhishDestroy recommends avoiding any unsolicited links claiming to be from Google and always verifying the URL before entering credentials. As the domain is now offline, the immediate threat is contained, but similar domains may appear, so vigilance is advised.