vote-umbra[.]xyz

vote-umbra.xyz is a phishing domain that has been taken offline, but it was initially flagged by 2 out of 91 vendors on VirusTotal. The domain is also listed on public blocklists maintained by PhishDestroy, MetaMask, and SEAL. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, vote-umbra.xyz was created on May 27, 2026.

The domain's primary objective was credential theft, a common tactic used by cybercriminals to gain unauthorized access to personal accounts. Despite being offline now, the presence of this domain on multiple blocklists indicates its potential threat level and the importance of early detection in mitigating risks.

PhishDestroy's inclusion of vote-umbra.xyz in its blocklist underscores the domain's malicious intent. The fact that it was flagged by MetaMask suggests a possible targeting of cryptocurrency users, aiming to exploit the growing interest and investments in digital currencies. This highlights the ongoing need for robust security measures to protect sensitive user information from phishing attacks.