omni[.]variiational[.]io

Analysis indicates that omni.variiational.io is currently active and classified as a generic phishing infrastructure. The domain resolves to the IP address 188.114.96.3, which is hosted by Cloudflare, Inc. in Canada (CA). TLS is provided by Google Trust Services under the WE1 certificate, confirming the use of a legitimate certificate authority but not implying benign intent. An HTTP 301 redirect is observed, and the sole page title returned is “Just a moment…”, offering no additional context about the payload. The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy feed. VirusTotal reports that four of ninety‑one scanning engines have flagged the domain, reinforcing the suspicion of malicious use. The risk level is marked high and the status remains active. Defenders should add the domain to outbound filtering rules, enforce DNS sinkholing, and monitor for any connections to the associated IP. Because the site’s content beyond the title has not been publicly disclosed, further manual inspection is recommended to determine the specific phishing lure and to validate any additional indicators.