omni[.]variaational[.]io

Analysis of omni.variaational.io as of July 19 2026 shows the domain is actively serving a generic phishing campaign and is classified as high risk. The site returns an HTTP 301 redirect and presents the page title “Just a moment…”, indicating a possible interstitial or redirect page. The TLS certificate is issued by Google Trust Services under the WE1 root, confirming the use of a legitimate certificate chain. Network resolution points to Cloudflare, Inc. infrastructure in Canada (IP 172.67.173.220). VirusTotal scans have yielded six positive detections out of ninety‑one vendors, and the domain is currently blocked by PhishDestroy and listed on one public security blocklist. These artifacts collectively confirm malicious intent, yet no detailed payload or credential‑harvesting page has been disclosed, leaving the exact phishing vector uncertain. Defenders should immediately add omni.variaational.io to URL filtering and DNS block policies, monitor outbound connections to the associated Cloudflare IP range, and ensure that endpoint protection solutions are updated to reflect the six VirusTotal detections. Continuous threat‑intel feeds should be consulted for any new indicators, and any attempted user interaction with the “Just a moment…” page should be logged for forensic analysis.