omni[.]varkational[.]io

The domain omni.varkational.io is currently active and serves a generic phishing page that returns the HTTP 301 status code and displays the title "Just a moment...". DNS resolution points to the IP address 188.114.96.3, which is hosted by CloudFlare, Inc. in Canada. The TLS certificate presented is issued by Google Trust Services under the WE1 intermediate, indicating use of a publicly trusted certificate chain. The site is listed on a single security blocklist, PhishDestroy, confirming that at least one anti-phishing feed has identified it as malicious. VirusTotal scans show that four of ninety-one AV engines have flagged the domain, providing additional independent detection. The combination of a CloudFlare front-end, a legitimate-looking certificate, and a minimal detection footprint suggests an attempt to obscure the true origin while still delivering a phishing payload. No further intelligence such as registration details, hosting provider beyond CloudFlare, or observed malicious payloads is available. Defenders should block the domain at network perimeter and DNS resolvers, monitor for outbound connections to 188.114.96.3, and add the indicator to internal threat intel feeds. Continuous re-assessment is advised, as the domain remains active and may evolve its tactics.