umaga[.]it[.]com

As of July 27, 2026, the domain umaga.it.com is under active investigation for involvement in generic phishing activity. The domain currently resolves to the IP address 65.9.130.22 and is operational. Its DNS infrastructure is hosted via AWS nameservers, specifically ns-1266.awsdns-30.org, ns-1835.awsdns-37.co.uk, ns-282.awsdns-35.com, and ns-840.awsdns.

At present, umaga.it.com is blocked by the PhishDestroy security provider and is listed on one industry-recognized security blocklist. These are concrete indicators that the domain has been recognized as a potential phishing threat by at least one automated protection system and a blocklist curator. Analysis via VirusTotal shows that the domain has been scanned by 91 different vendors, but none currently flag it; however, the absence of positive detections in VirusTotal results should not be interpreted as evidence of safety, especially given its presence on an external blocklist and a real-time block by PhishDestroy.

There is no information provided regarding the site's content, page title, SSL certificate, HTTP status, or affiliations with specific brands or phishing kits. Defenders should treat this domain as suspicious due to its confirmed presence on a security blocklist and active status. It is recommended to block and monitor connections to umaga.it.com within enterprise security infrastructure, and to continue gathering intelligence to determine the scope and exact nature of the phishing campaign associated with this domain.