omni[.]variatoinal[.]one

This domain, omni.variatoinal.one, poses a credential theft risk by impersonating Google’s login interface. Visitors are tricked into entering usernames, passwords, or other sensitive information, which is then harvested by threat actors. The site mimics Google’s branding, including its page title and visual design, to deceive users into believing it is legitimate. Analysis indicates the domain was registered on May 20, 2026, through Dynadot Inc, an unusual registration date that may suggest attempts to evade detection. It resolves to IP address 172.67.179.149 and is flagged by 5 out of 95 security vendors on VirusTotal. Additional indicators include the use of a Let’s Encrypt SSL certificate, Google Web Server technology, and inclusion on one security blocklist. If you visited omni.variatoinal.one or entered credentials, immediately change your Google password and enable multi-factor authentication. Review account activity for unauthorized access or suspicious transactions. Clear browser cache and cookies to remove any stored session data. Monitor linked accounts for signs of compromise, as stolen credentials may be used across multiple platforms. Report the incident to your organization’s security team or relevant authorities for further investigation.