omni[.]variatuonal[.]io

On 19 July 2026, the domain omni.variatuonal.io was observed hosting a generic phishing campaign and is classified as high‑risk and active. DNS resolution points to the IP address 188.114.96.3, which is owned by Cloudflare, Inc. and geolocated to Canada. The server presents an SSL certificate issued by Google Trust Services under the WE1 designation, indicating the use of a standard TLS certificate rather than a self‑signed or brand‑specific one. HTTP requests receive a 301 redirect response, and the page title returned by the server is “Just a moment…”. The domain is currently listed on one public blocklist and has been blocked by the PhishDestroy mitigation service. VirusTotal analysis shows that four of ninety‑one scanning engines have flagged the domain as malicious, corroborating the suspicion of phishing activity. No further technical details such as page content, credential‑stealing forms, or payloads have been disclosed, leaving the exact phishing vector uncertain. Defenders should add the domain and its associated IP address to network deny lists, monitor DNS queries for lookups, and consider sinkholing the IP range if feasible. Continuous re‑evaluation is advised, as the infrastructure may evolve.