omni[.]variational-io[.]mom

The domain omni.variational-io.mom is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform coingecko. It poses an elevated risk by attempting to deceive victims into connecting wallets through fraudulent wallet-connect prompts, though no drainer kit was identified. As of the latest verification, omni.variational-io.mom has been taken offline.

Technical indicators confirm the malicious nature of omni.variational-io.mom. The domain was flagged by 3 of 95 VirusTotal security vendors, including alphaMountain.ai, Gridinsoft, and SOCRadar, with a Gridinsoft trust score of 0/100. It appears on 2 security blocklists, PhishDestroy and ScamSniffer, and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on February 21, 2026. The domain resolves to IP address 172.67.145.48, hosted on Cloudflare's network (AS13335) in the US, with nameservers drew.ns.cloudflare.com and vivienne.ns.cloudflare.com. No SSL certificate was issued, and the observed page title was '87,890.09 | BTC-PERP | Variational Omni'.

Victims who interacted with omni.variational-io.mom should immediately revoke any token approvals granted to suspicious contracts using tools like Etherscan or Revoke.cash. Move remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Change passwords for any accounts accessed during the phishing attempt and enable two-factor authentication (2FA) where available. Report the domain to coingecko's security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.