omni[.]vvariational[.]io

Analysis indicates that omni.vvariational.io is an active phishing endpoint currently resolving to 172.67.167.218, a Cloudflare IP address located in Canada. The domain is flagged by six security vendors on VirusTotal and appears on at least one security blocklist, with PhishDestroy having already blocked access. The HTTP response code is a 301 redirect, and the page title 'Just a moment...' suggests the site may be leveraging Cloudflare's challenge or proxy services, a common tactic to obscure malicious infrastructure. No specific brand impersonation or phishing kit has been identified in the available data, and the exact content or target of the phishing campaign remains unconfirmed. Defenders should treat this domain as high-risk infrastructure and prioritize blocking both the domain and its resolving IP. Given the use of Cloudflare, monitoring for changes in resolution or SSL certificates (currently issued by Google Trust Services / WE1) may help detect evasion attempts. Further investigation into associated domains or IPs may reveal broader campaign patterns.