umbra[.]stakingsrewards[.]club

Analysis of umbra.stakingsrewards.club indicates a confirmed brand impersonation operation targeting Google, classified as an investment scam. The domain was registered on February 21, 2026, and has since been flagged by 14 of 93 security vendors on VirusTotal, with an active listing on the PhishDestroy blocklist. Infrastructure analysis reveals the domain resolves to IP address 142.251.141.100, which is hosted under AS15169 (Google LLC) in the United States.

The SSL certificate is issued by WE2, and the page title explicitly displays 'Google,' aligning with the reported impersonation of the Google brand. Current status shows the domain as offline, though prior activity included a live page consistent with investment scam tactics. Defenders should treat this domain as a high-confidence threat, particularly given its association with a known scam type and its presence on multiple detection platforms.

The combination of brand impersonation, blocklist inclusion, and vendor detections provides strong evidence of malicious intent. No additional content analysis is available, but the domain’s infrastructure and detection history warrant immediate blocking and monitoring for resurgence.