omni[.]variqtional[.]io

Analysis of omni.variqtional.io conducted on July 19, 2026 indicates that the domain is currently active and serves a generic phishing payload. The site returns an HTTP 301 redirect and presents the page title “Just a moment…”. DNS resolution points to the IP address 188.114.97.3, which is owned by CloudFlare, Inc. and located in Canada. The TLS certificate is issued by Google Trust Services under the WE1 intermediate, confirming the use of a legitimate certificate authority. VirusTotal records show that four of ninety‑one scanning engines have flagged the domain, demonstrating partial detection by security products. The domain is listed on a single external blocklist and is actively blocked by the PhishDestroy service. The combination of a CloudFlare front‑end, a generic title, and partial vendor detections suggests an opportunistic phishing infrastructure that may be leveraged to host credential‑harvesting pages. No additional intelligence regarding the underlying payload, registration details, or targeted brands is available. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated IP, and consider adding the host to internal blocklists. Ongoing observation is recommended to detect any changes in detection rates or additional blocklist listings.