omni[.]vatiational[.]io

Analysis on 19 July 2026 identifies omni.vatiational.io as an active generic phishing infrastructure. The site returns an HTTP 301 redirect and presents the page title “Just a moment…”. DNS resolution points to Cloudflare‑provided IP 104.21.74.22, geolocated in Canada. The TLS certificate is issued by Google Trust Services under the WE1 identifier, indicating a legitimate certificate chain but not confirming site intent. The domain is listed on one security blocklist and has been flagged by PhishDestroy. VirusTotal reports six of ninety‑one scanners labeling the domain as malicious, reinforcing the suspicion. Risk level is high. No additional content or payload details are available beyond the title, leaving the exact phishing vector unknown. Defenders should block the domain at perimeter and DNS layers, monitor outbound connections to the associated IP, and treat any credential submissions to the site as compromised. Ongoing observation is advised to capture any evolving tactics.