omni[.]variaitonal[.]io

Analysis of omni.variaitonal.io as of July 19 2026 shows that the domain is presently active and attributed to a generic phishing campaign. The site resolves to the CloudFlare‑owned address 188.114.96.3, which geolocates to Canada. TLS termination is provided by Google Trust Services under the WE1 certificate, indicating a valid SSL chain. An HTTP request returns a 301 redirect and the only visible page title is “Just a moment…”, which offers no further insight into the payload or targeted brand. VirusTotal records indicate that four of ninety‑one scanning engines have flagged the domain, confirming that at least a minority of security products consider it malicious. The domain is currently blocked by the PhishDestroy service and appears on one external blocklist, reinforcing its classification as a phishing vector. Because the underlying content has not been publicly disclosed, the precise phishing lure, credential‑stealing form, or victim demographic remain unknown. Defenders should continue to deny resolution to this host at the DNS level, incorporate the IP address and domain into firewall and proxy block rules, and monitor for any related C2 activity. Ongoing observation of the certificate and redirect behavior is advised to detect potential changes in the infrastructure.