dvsurvey[.]ch

The domain dvsurvey.ch is currently classified as a high‑risk generic phishing site. It presents a questionnaire titled “Questionnaire DGCS – Maturité en cybersécurité des institutions,” suggesting a survey or prize‑related lure. The site is listed as active as of 12 July 2026. Infrastructure analysis reveals that the domain resolves to IP 188.114.96.3, hosted in the United States under ASN 13335, which belongs to Cloudflare, Inc. The service returns an HTTP 301 redirect and supports HTTP/3, indicating use of Cloudflare’s edge platform. TLS is provided by Google Trust Services under the WE1 certificate, and the authoritative nameservers are dolly.ns.cloudflare.com and nick.ns.cloudflare.com, both owned by Cloudflare. Detection data shows a Gridinsoft trust score of 0 / 100 and presence on one security blocklist. VirusTotal reports that 2 of 95 scanned security vendors have flagged the domain. The site is also blocked by PhishDestroy, reinforcing the assessment of malicious intent. No additional security vendor consensus is available beyond these indicators. Defenders should add dvsurvey.ch to deny‑list rules across DNS filtering, web proxy, and endpoint protection solutions. Continuous monitoring of the associated IP address and Cloudflare‑hosted assets is advised, as the attacker can rapidly swap underlying servers while retaining the same domain. Incident response teams should treat any user interaction with the survey as potentially compromised and advise affected users to disregard the request.