omni[.]variationali[.]io

Analysis of omni.variationali.io, observed on July 19, 2026, identifies the domain as a high‑risk, active generic phishing infrastructure. The site returns an HTTP 301 redirect and presents the page title "Just a moment...". DNS resolution points to the Cloudflare‑hosted address 104.21.74.132, which is geolocated to Canada and associated with Cloudflare, Inc. The TLS certificate is issued by Google Trust Services under the WE1 hierarchy, indicating legitimate certificate provisioning but not authentication of the underlying content. VirusTotal records show that four of ninety‑one scanning engines have flagged the domain, and it appears on a single external blocklist, evidencing modest but notable detection. PhishDestroy has also listed the domain as blocked, reinforcing its malicious classification. While the specific phishing lure or targeted brand is not disclosed in the available data, the combination of redirect behavior, trusted‑looking certificate, and detection flags warrants immediate defensive action. Organizations should add the domain and its resolved IP to outbound filtering rules, monitor for related traffic patterns, and consider sinkholing the IP address to disrupt further abuse. Continuous re‑evaluation is advised as additional intelligence may emerge.