omni[.]variattional[.]io

Analysis of omni.variattional.io shows a 301 HTTP redirect and a page title of "Just a moment..." indicating a placeholder response rather than a finished login page. The domain resolves to IP address 188.114.97.3, which is owned by CloudFlare, Inc. and geolocated to Canada. TLS termination is provided by a Google Trust Services certificate labeled WE1, a credential frequently used by legitimate services but also adopted by malicious operators to gain credibility. The site is currently listed on a single security blocklist and has been flagged by PhishDestroy. VirusTotal scans report four detections out of ninety‑one vendors, confirming that multiple security engines consider the domain malicious. No additional intelligence about the specific phishing payload or targeted brand is available; the observable evidence is limited to infrastructure and detection metadata. Defenders should block traffic to the domain and its associated IP, add the domain to internal deny lists, and monitor DNS queries for related CloudFlare IP ranges. Continuous re‑evaluation is advised in case the site evolves or additional detections emerge.