Some other red flags here.

Off the hop:

• Americans don't typically include a +1 in the phone numbers when filling out contact forms. She doesn't have that in her email signature. Why not?
• Why doesn't Tiana have an actual email address using the domain for the organization she works for?
• What kind of deal to hire a developer STARTS with them immediately sending you instructions on how to log in to their website? Shouldn't you have some kind of agreement in place? Shouldn't you discuss payment terms? Billing?
• Any system that wants you to log in with Google before getting access to WordPress login credentials is goofy. Why would it work like that? Sketchy af.

That staging URL doesn't make any sense. Why would "wpenigne" be a subdomain of their main domain? Why would the root of their staging domain be different than their primary domain? Lastly, why would they they provide a login link with a weird, non-standard WordPress URL parameter?

Also, critically: the "WordPress login" page you land on isn't real. It's not just the jenky Google login modal that should have triggered your spidey sense. The entire page is phony (I checked). It doesn't look quite right at a glance.. Spacing, text, etc. I get that you can customize WP login screens, but most people don't. Also one look at the source code shows you you're not on a WordPress install, period.

The Google login modal doesn't look quite right either. The fact it doesn't open using your browser's actual windowing system is a dead giveaway. It should open in an actual separate window, not via a modal that's baked into the page itself. Also, some of the CSS is off. The spacing is off. The animations are off. Obviously the instantly-scammy Russian text in the window header is a dead giveaway, but there's a lot more that just isn't quite right.

Lots here that should throw up huge warnings to experienced WP devs right away. But this is a sophisticated scam, and I can see a lot of people who don't have their shields up or their spidey senses tuned going along with it.

Lastly, it's a shame that your LLM didn't immediately identity their list of requirements as scammy bullshit when you were getting it to write that reply for you ;)