zentrivara[.]digital

Analysis indicates that the domain zentrivara.digital was registered on 22 February 2026 through Dynadot LLC and currently resolves to 188.114.97.3, an address owned by Cloudflare (AS13335) located in the United States. The site serves content over HTTPS using a Let’s Encrypt certificate (identifier E8) and returns HTTP 200 responses. The page title observed is “Zentrivara — Autobahnvignette Schweiz: Ihr Wegweiser”, suggesting the page is positioned as a guide for Swiss highway tolls, but no further content has been examined. Infrastructure inspection shows the domain is protected by Cloudflare services, including Browser Insights and HTTP/3, and uses the nameservers mia.ns.cloudflare.com and ryan.ns.cloudflare.com. Reputation data shows a Gridinsoft trust score of 0 out of 100, and the domain appears on a single blocklist, currently blocked by PhishDestroy. VirusTotal analysis reports a single positive detection out of 95 scanned engines, indicating at least one security vendor has flagged the site as malicious. The combination of recent registration, low trust score, blocklist presence, and a positive detection aligns with the classification of a generic phishing campaign. Uncertainty remains regarding the exact phishing payload and targeted victims, as the site content has not been fully dissected. Defenders should add zentrivara.digital to deny‑list rules, monitor DNS queries for the associated IP, and consider sinkholing the domain to prevent further victim exposure. Continuous re‑evaluation is advised as additional telemetry becomes available.