omni[.]variatioonal[.]io

Analysis of omni.variatioonal.io indicates that the domain is actively serving a phishing page as of the report date, July 19, 2026. The site presents a generic page title "Just a moment..." and returns an HTTP 301 redirect, suggesting a possible intermediate landing or URL shortener stage. DNS resolution points to IP address 188.114.97.3, which is owned by Cloudflare, Inc. and geolocated to Canada, providing a layer of anonymity for the underlying infrastructure. The TLS certificate is issued by Google Trust Services under the WE1 certificate authority, confirming that the site employs a valid HTTPS certificate, a common tactic to increase user trust. Threat intelligence shows the domain appears on a single security blocklist and has been flagged by four of ninety-one VirusTotal scanners, indicating modest but non‑trivial detection across security vendors. PhishDestroy has already blocked the domain, reinforcing its classification as a phishing vector. Risk is assessed as high due to the confirmed phishing behavior and active status. Defenders should add omni.variatioonal.io to DNS and proxy block lists, monitor for any additional IP addresses associated with the domain, and enforce TLS inspection to detect potential credential harvesting. Continuous re‑evaluation is advised, as further indicators may emerge if the site changes hosting or payload.