viaswiss[.]info

The domain viaswiss.info was registered on February 22, 2026 and is presently taken offline. Infrastructure analysis shows the domain resolves to the IP address 188.114.96.3, which is hosted in the United States and belongs to ASN 13335 operated by Cloudflare, Inc. The authoritative name servers for the domain are amber.ns.cloudflare.com and jeff.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. No SSL/TLS certificate was observed for the site, indicating that the service was delivered over plain HTTP or that certificate deployment was omitted before takedown.

The page title retrieved during the brief observation period reads "Via Portal: Ihr digitaler Schlüssel für E-Vignette und PSVA," suggesting an attempt to mimic official Swiss government services related to electronic vignette and PSVA processes. The domain has been flagged by the PhishDestroy blocklist and appears on a single additional security blocklist, reflecting limited but concrete detection by external monitoring. VirusTotal analysis recorded a single positive detection out of 95 scanned security vendors, providing further evidence of malicious intent.

While the site’s visual content and specific credential‑capture mechanisms remain unverified, the combination of brand impersonation, Cloudflare‑based hosting, and detection by reputable anti‑phishing feeds indicates a purposeful credential‑harvesting campaign targeting users seeking Swiss government services. Defenders should continue to block the domain at network perimeter devices, update URL filtering rules to include the host, and monitor for any resurgence of similar Cloudflare‑hosted domains that reference Swiss governmental terminology. Incident response teams are advised to advise end users to avoid any unsolicited links to viaswiss.info and to verify legitimate Swiss government portals through official channels.