omnifoundation[.]co

PhishDestroy identifies omnifoundation.co as a high-risk generic phishing domain, currently offline but still a significant threat to users who may encounter it through email or social media links. The domain, created on February 21, 2026, has been flagged by 13 out of 95 security vendors on VirusTotal, indicating broad consensus on its malicious nature. It also appears on three separate security blocklists, and the page title simply repeats the domain name, a common tactic in phishing campaigns to appear legitimate.

Technical indicators underscore the domain's malicious intent. With a creation date less than a month ago and a high risk level, omnifoundation.co was likely set up for a short-lived phishing campaign. Its current offline status suggests either takedown by authorities or abandonment by the operators. However, the domain could be reactivated or used for future attacks. The virusTotal score of 13/95, combined with its presence on multiple blocklists, provides strong evidence of phishing activity.

Users who have interacted with omnifoundation.co should immediately change any passwords entered on the site and monitor financial accounts for unauthorized transactions. Avoid clicking links in unsolicited messages, and always verify URLs before entering sensitive information. PhishDestroy recommends enabling two-factor authentication and using a password manager to reduce the risk of credential theft. If you suspect exposure, report the incident to your security team and run a full system scan for malware.