omni[.]variaional[.]io

Analysis of omni.variaional.io as of July 19, 2026 indicates that the domain is actively serving a phishing page. The HTTP response is a 301 redirect and the page title returned is “Just a moment…”, which is typical of automated verification services used by malicious actors. The domain resolves to the IP address 188.114.97.3, which is owned by CloudFlare, Inc. and located in Canada. The TLS certificate is issued by Google Trust Services under the WE1 intermediate, confirming that the site presents a valid HTTPS connection despite its illicit purpose. VirusTotal records show that four of ninety‑one scanning engines have flagged the domain, and it appears on a single public blocklist. PhishDestroy has also listed the domain as blocked. These indicators collectively suggest a high‑risk phishing operation. No additional metadata such as registration details, payload samples, or target brand information is available, leaving the exact phishing campaign structure and victim profile uncertain. Defenders should block traffic to the domain at the network perimeter, add the IP address 188.114.97.3 to deny lists, and monitor for any attempted connections from internal hosts. Continuous threat‑intel feeds should be consulted for updates, and any detections should be escalated according to organizational incident‑response procedures.