viaservic[.]digital

The domain viaservic.digital was registered on February 21, 2026 through Dynadot LLC and is currently hosted behind Cloudflare’s network (AS13335) with the IP address 104.21.7.104 located in the United States. DNS resolution uses the Cloudflare nameservers bart.ns.cloudflare.com and colette.ns.cloudflare.com, and the site is served over HTTPS with a Google Trust Services / WE1 certificate. The web server advertises HTTP/3 support but returns an HTTP 525 status code, indicating an SSL handshake failure that may be intentional to evade content inspection. The page title observed is "viaservic.digital – Putzeführer zu Schweizer Vignetten (Schweiz)", suggesting the site is posing as a guide for Swiss toll vignette purchases, a typical lure for phishing victims seeking vehicle‑related services.

The domain appears on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal scans show that 2 of 93 security vendors have flagged the domain, reinforcing its malicious reputation. Risk is classified as high and the domain remains active as of the report date, July 25, 2026.

Defenders should add the domain and its resolving IP to outbound and inbound blocklists, enforce strict TLS inspection for Cloudflare‑served traffic, and monitor for any related CNAME or sub‑domain variations. Updating web proxy and DNS filtering rules to deny traffic to viaservic.digital, and correlating any authentication attempts against this host with user activity logs, will reduce the likelihood of successful credential harvesting. Continuous threat‑intel feeds should be consulted for new indicators tied to this infrastructure, and any internal alerts triggered by the observed SSL certificate or HTTP/3 usage should be investigated promptly.