variagional[.]io

Analysis of variagional.io indicates that the domain is actively being used for malicious activity as of the report date, August 04, 2026. The domain resolves to the IP address 104.21.29.78, which is hosted behind Cloudflare's network, as reflected by the authoritative nameservers henrik.ns.cloudflare.com and noor.ns.cloudflare.com. Registration records show the domain was created on June 22, 2026 and was registered through GNAME.COM PTE. LTD., a registrar frequently observed in abuse reports.

Threat intelligence feeds have listed the domain on three separate security blocklists, and it is currently blocked by the PhishDestroy, MetaMask, and SEAL blocklisting services. VirusTotal scans have returned seven positive detections out of ninety‑one security vendors, reinforcing the suspicion of malicious intent. The classification in the provided intelligence is "generic phishing," and the risk level is marked as high. No additional details such as page title, SSL certificate information, or HTTP response codes are available, leaving the exact content and phishing vector unverified.

Given the corroborating evidence from multiple independent sources—registrar data, IP hosting, blocklist presence, and vendor detections—defenders should treat variagional.io as a confirmed malicious host. Recommended mitigation steps include adding the domain to internal deny lists, updating web filtering policies to block traffic to the IP address 104.21.29.78, and monitoring for any related indicators of compromise that may arise from user interaction with the domain. Continued observation is advised, as the domain remains active and could evolve its tactics.