omni[.]vairational[.]io

Analysis of omni.vairational.io indicates an active generic phishing infrastructure. The domain resolves to IP 188.114.97.3, which is hosted by CloudFlare, Inc. in Canada, and the TLS certificate is issued by Google Trust Services under the WE1 hierarchy, suggesting legitimate certificate provisioning but not mitigating the malicious intent. HTTP responses return a 301 redirect and the page title observed is "Just a moment...", a common placeholder used in credential‑harvesting sites. The domain appears on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal scans show four of ninety‑one security vendors flag the domain, reinforcing the suspicion. Current intelligence lacks content‑level detail beyond the title, so the exact payload or phishing lure remains unknown. Defenders should treat the domain as high‑risk, enforce network‑level blocks, monitor DNS queries for the IP address, and incorporate the domain into email‑filtering rules. Ongoing observation is advised to capture any evolution of the site content or additional detection signals.