a-mia[.]ch

The domain a-mia.ch was registered on February 28, 2026 through the Swiss registrar Webland.ch and is served by the authoritative name servers ns1.webland.ch through ns4.webland.ch. DNS resolution points to the IPv4 address 92.43.216.140, which belongs to AS25563 (Webland AG) and is geographically located in Switzerland. The site presents a TLS certificate issued by Let’s Encrypt (R13), indicating that HTTPS is available, but HTTP requests return the title "403 - Forbidden: Access is denied," suggesting that the web server is currently denying access to the content.

The domain is listed on a single security blocklist and has been flagged by the PhishDestroy sinkhole, confirming that it has been identified as malicious by at least one dedicated anti‑phishing service. VirusTotal scans show that 5 out of 93 security vendors have reported the domain as malicious, providing independent corroboration of its threat status. The current operational state is offline, meaning the host is no longer actively serving the payload, but the infrastructure remains visible in DNS and may be reactivated.

Defenders should continue to monitor the IP address 92.43.216.140 for any future activity, enforce blocklists that include a-mia.ch, and consider adding the domain to internal threat intelligence feeds. Because the page content could not be retrieved, the exact phishing payload or target brand remains unclear; analysts should treat the domain as a generic phishing vector until further evidence emerges. Continuous vigilance is advised, especially for organizations that rely on web filtering solutions, to ensure that any re‑emergence of the domain is promptly detected and blocked.