ominiportal[.]com

Analysis as of July 22, 2026 indicates that ominiportal.com was registered on July 15, 2025 through Upperlink Limited. The domain lacks an SSL certificate and returns HTTP 200 despite being listed as offline by the reporting system. Infrastructure inspection shows the hostname resolves to 192.250.239.86, an address assigned to WHG Hosting Services Ltd in the United Kingdom (AS51713). The site is associated with a fake‑airdrop campaign that impersonates the brand “across”. The page title captured by crawlers reads “Decentralized Dapps – – We are unifying Web3 by providing best‑in‑class, self‑custodial, and multichain support”, which suggests the threat actor is leveraging Web3 terminology to lend credibility to the airdrop lure.

Reputation services provide a Gridinsoft trust score of 0 out of 100, indicating a highly malicious profile. VirusTotal reports that 2 of 95 scanning engines flagged the domain, reinforcing the malicious classification. The domain appears on four external blocklists and has been actively blocked by threat‑intelligence feeds including PhishDestroy, Polkadot, Enkrypt, and Codeesura. No TLS certificate is present, which is consistent with the rapid deployment of a low‑cost phishing infrastructure.

The available evidence confirms the domain’s involvement in brand impersonation and a fake‑airdrop scam, but the exact content served at the URL cannot be verified because the site is currently offline. Defenders should continue to block the IP address 192.250.239.86 and add ominiportal.com to URL filtering policies. Monitoring of the registrar Upperlink Limited for additional malicious registrations is advised, as is periodic re‑scanning with VirusTotal or similar multi‑engine platforms to capture any changes in detection status. Organizations that use the “across” brand should educate users about unsolicited airdrop offers and enforce multi‑factor authentication to mitigate credential compromise.