omniart-appp[.]pages[.]dev

The domain omniart-appp.pages.dev is a generic phishing site designed to steal user credentials through credential phishing. It does not impersonate a specific brand or use a known drainer kit. As of the latest verification, omniart-appp.pages.dev has been taken offline, but it previously posed an elevated risk to visitors.

Technical indicators confirm the malicious nature of omniart-appp.pages.dev. The domain was flagged by 2 of 95 VirusTotal security vendors, including ADMINUSLabs and alphaMountain.ai, and appears on 2 security blocklists (PhishDestroy and ScamSniffer). It was registered through Cloudflare, Inc. on March 23, 2026, and resolved to the IP address 188.114.97.3, hosted by Cloudflare in Canada. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'OmniArt'. Technologies detected on the site included Bootstrap, Unpkg, SweetAlert2, jsDelivr, HSTS, Google Analytics, crypto-js, and cdnjs. The domain used Cloudflare nameservers (casey.ns.cloudflare.com and virginia.ns.cloudflare.com) and returned an HTTP 403 status when accessed.

Users who interacted with omniart-appp.pages.dev should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on all accounts. Monitor financial and personal accounts for signs of fraud or unauthorized access. Report the phishing domain to Google Safe Browsing, the Federal Trade Commission (FTC), and local cybercrime authorities. If the site was accessed via a link in an email or message, report the sender as phishing to the relevant platform.