omni[.]vqriational[.]io

The domain omni.vqriational.io is currently active and has been classified as a high‑risk generic phishing site. DNS resolution points to the IP address 188.114.97.3, which is hosted by CloudFlare, Inc. in Canada. The server presents a TLS certificate issued by Google Trust Services under the WE1 designation, indicating that the site uses a valid‑looking SSL chain. HTTP requests receive a 301 redirect response, and the only observed page title is "Just a moment...". The domain is listed on a single security blocklist and has been blocked by the PhishDestroy feed. VirusTotal analysis shows that 4 of 91 security vendors have flagged the domain, suggesting partial detection across the scanning community. While the underlying payload, landing page content, and targeted brand have not been publicly disclosed, the presence of a generic phishing label and the observed infrastructure indicate a likely credential‑ harvesting operation. Defenders should proactively block the domain at the network perimeter, monitor DNS queries for the resolved IP, and enforce TLS inspection to detect potential credential submissions. Continuous tracking of the IP reputation and periodic rescanning on multi‑engine platforms are recommended to capture any evolution in the threat profile.