omni[.]variagional[.]io

Analysis of omni.variagional.io indicates it is currently active and classified as a generic phishing threat with a high risk rating. The domain resolves to the Cloudflare address 104.21.29.78, which registers to Cloudflare, Inc. in Canada. TLS termination is provided by a Google Trust Services / WE1 certificate, a common choice for abused infrastructure. HTTP requests return a 301 redirect and the only observable page title is “Just a moment...”, offering no additional context about the hosted content. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy. VirusTotal reports that four of ninety‑one scanning engines have flagged the domain, reinforcing the malicious assessment. While the available data confirms phishing intent, the specific credential‑capture page, target brand, or malware payload remain undisclosed. Defenders should treat the domain as hostile: block network connections to 104.21.29.78 when associated with the domain, add the host to URL filtering and email security policies, and continue monitoring for any changes in detection scores or additional blocklist listings. Ongoing analysis is recommended to capture the actual landing page content should the redirect resolve to a more detailed phishing lure.