omni[.]varistional[.]io

Analysis of omni.varistional.io as of 19 July 2026 indicates that the domain is actively hosting a phishing infrastructure. The site returns HTTP status code 301 and presents the page title “Just a moment…”, a pattern often used to delay analysis. TLS termination is provided by Google Trust Services under the WE1 certificate, suggesting the use of Cloudflare’s default SSL offering. DNS resolution points to 172.67.200.88, an address owned by Cloudflare, Inc. and located in Canada. The domain appears on a single public blocklist and has been flagged by PhishDestroy. VirusTotal scans show that 4 of 91 security vendors have identified the domain as malicious, confirming a consensus of suspicious activity despite a relatively low detection count. The high risk rating reflects the generic phishing classification and the active status. Current intelligence does not reveal the specific credential‑stealing payload or target brand; the page content beyond the title has not been disclosed. Defenders should block the domain at the DNS and proxy layers, monitor outbound connections to the identified IP, and treat any credential submissions to the site as compromised. Continuous re‑evaluation is advised, as additional detections may emerge.