umbraapex[.]shop

Analysis of the domain umbraapex.shop indicates an active, elevated‑risk phishing infrastructure. The domain was registered on June 12, 2026 through Namecheap, Inc., and it resolves to the IP address 125.124.123.122. Reputation data shows the domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy, confirming that defensive feeds are already flagging the host.

VirusTotal scans report that six of ninety‑one security vendors classify the domain as malicious, providing independent corroboration of its threat posture. The available intelligence does not include a page title, SSL certificate details, HTTP response codes, or any brand‑specific lure, so the exact content served by the site remains unverified. Nonetheless, the combination of recent creation, rapid appearance on a blocklist, and multiple vendor detections aligns with typical behavior of newly deployed generic phishing sites.

Defenders should prioritize blocking umbraapex.shop at both DNS and proxy layers, add the associated IP 125.124.123.122 to network‑wide deny lists, and monitor outbound traffic for connections to that address. Continuous re‑assessment is advised, as future observations may reveal additional indicators such as payload delivery mechanisms or compromised credentials.