omni[.]cariational[.]io

This domain, omni.cariational.io, is currently flagged as a high‑risk generic phishing site. The HTTP response is a 301 redirect, and the TLS certificate is issued by Google Trust Services under the WE1 profile, indicating use of a legitimate certificate chain. DNS resolution points to 188.114.96.3, an address owned by CloudFlare, Inc. located in Canada. VirusTotal has logged detections from 14 of 91 scanned security vendors, confirming malicious classification. The site is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. The only retrieved page metadata is the title “Just a moment…”, and no further content has been captured. Infrastructure analysis thus shows a typical short‑lived phishing deployment that leverages reputable TLS issuance and CloudFlare’s CDN to obscure origin. Defenders should ensure that the domain and its resolving IP are denied at network borders, update local blocklists with the known entries, and monitor for additional domains that resolve to the same IP range. Continuous scanning of the IP for new hostnames is recommended, as the current evidence does not reveal the final payload or targeted brand.