variational-network[.]xyz

The domain variational-network.xyz was registered on February 21, 2026 through NiceNIC International Group Co., Limited. It resolves to the Cloudflare‑owned address 172.67.178.21, which is announced by AS13335 and geolocated to the United States. Cloudflare services are evident from the presence of HSTS, Cloudflare Browser Insights, and HTTP/3 support, and the domain is served with a Google Trust Services / WE1 SSL certificate. The authoritative nameservers are nico.ns.cloudflare.com and vera.ns.cloudflare.com. The site currently returns a 403 Forbidden page title, and its status is listed as offline, indicating that the content is no longer reachable at the time of analysis.

Security telemetry flags the domain as high‑risk. It appears on one public blocklist and is specifically blocked by the PhishDestroy service. The Gridinsoft trust score is 0 out of 100, reflecting a severe lack of confidence in the site’s legitimacy. VirusTotal scans show that five of ninety‑three security vendors have flagged the domain, reinforcing the suspicion of malicious intent.

Given the combination of a recent registration, low trust score, Cloudflare‑based hosting, SSL issuance by a reputable CA, and multiple independent detections, the domain is classified as a confirmed phishing host. The exact phishing payload or targeted brand is not disclosed in the available data, and the 403 response prevents direct inspection of the landing page. Defenders should continue to block variational-network.xyz at perimeter controls, update DNS‑based allow‑lists to include the domain in denial lists, and monitor any future re‑registration attempts. Threat‑intel feeds should be refreshed to capture possible re‑use of the same infrastructure, and incident response teams should be alerted to the presence of this indicator in logs, especially any outbound connections to the Cloudflare IP range associated with the domain.