app[.]variaitional[.]com

Analysis indicates that app.variaitional.com was registered on May 20 2026 through Tucows Domains Inc. The domain resolves to the Cloudflare‑owned address 188.114.97.3, which is located in Canada. DNS is served by grace.ns.cloudflare.com and malcolm.ns.cloudflare.com, and the site presents a valid Let’s Encrypt certificate (E7). HTTP requests receive a 301 redirect, and the page title returned is “Markets | Variational Omni”. The domain is currently active and appears on three public blocklists. VirusTotal reports six of ninety‑one scanners flag the domain, and Gridinsoft assigns a trust score of 0 / 100. The domain is also listed by PhishDestroy, MetaMask, and SEAL as blocked. The observed indicators align with a generic phishing profile: a recently created domain, use of a reputable CDN, and a modest but non‑zero detection rate across multiple scanners. However, the exact payload, credential‑capture mechanisms, and targeted brand are not disclosed in the available data; the page title does not reveal a specific victim brand, and no further content analysis has been performed. Consequently, the full scope of the phishing campaign remains uncertain. Defenders should treat any traffic to app.variaitional.com as malicious. Immediate actions include adding the domain and its resolving IP to network deny lists, enforcing URL filtering, and monitoring for outbound connections to the Cloudflare address. Because the domain is already listed on multiple blocklists, ensure that existing security appliances are updated to reflect the latest listings. Continuous monitoring for new subdomains or changes in DNS resolution is advised, as the infrastructure could be leveraged for additional phishing hosts.