vairational[.]io

The domain vairational.io was registered on 22 June 2026 through GNAME.COM PTE. LTD. and is hosted on Cloudflare’s DNS infrastructure, using the authoritative nameservers henrik.ns.cloudflare.com and noor.ns.cloudflare.com. DNS resolution points to the address 188.114.96.3, an IP range operated by Cloudflare, which is frequently leveraged by threat actors to hide origin infrastructure.

VirusTotal has recorded five positive detections out of ninety‑one submitted scanners, indicating that multiple security products have flagged the domain as malicious. Independent blocklist providers have also taken action: PhishDestroy, MetaMask and SEAL list the domain as prohibited, and it appears on three additional security blocklists. These signals collectively suggest that the domain is being used for a generic phishing campaign, although the specific lure, targeted brand, or phishing kit has not been disclosed in the available intelligence.

No HTTPS certificate details, HTTP response codes, page title, or content snapshots have been published, so the exact page behavior remains unknown. Defenders should treat vairational.io as high‑risk: add the domain to network and web filtering rules, monitor DNS queries for the associated IP, and consider sinkholing traffic to the Cloudflare edge node if possible. Ongoing telemetry collection is advised to capture any future changes in hosting, content, or detection patterns.