via-dashboard[.]digital

Analysis of the infrastructure behind via-dashboard.digital shows the domain is hosted on Cloudflare’s network (ASN 13335) and resolved to the IP address 188.114.96.3, which is located in the United States. The domain was registered on February 22, 2026 through Dynadot LLC, and its authoritative nameservers are wesley.ns.cloudflare.com and luciane.ns.cloudflare.com, indicating the use of Cloudflare’s DNS services. TLS termination is provided by a Let’s Encrypt certificate (type E7), and the site responds with HTTP status 200 over HTTP/3, confirming a fully operational web service at the time of observation. Page metadata reveals the title “Startseite | VIA Dashboard AG,” which does not reference the targeted brand but the site is explicitly flagged as impersonating Sei.

Cloudflare Browser Insights is detected, suggesting the presence of standard analytics scripts. The domain appears on one security blocklist and is listed as blocked by PhishDestroy. VirusTotal scans recorded a single detection out of 95 security vendors, indicating at least one vendor flagged the domain as malicious. No additional public threat‑intel sources such as OTX or Google Safe Browsing entries are cited.

The combination of recent registration, use of a reputable CDN, a valid TLS certificate, and a single vendor detection points to a likely opportunistic brand‑impersonation campaign that relies on the perceived legitimacy of Cloudflare and Let’s Encrypt to avoid automated blocking. Defenders should proactively block the domain at network perimeter, add the IP address to deny‑list rules, monitor DNS queries for the associated nameservers, and update web‑filter and endpoint security policies to treat any traffic to via-dashboard.digital as hostile. Continuous re‑scanning with VirusTotal and other sandbox services is recommended to capture any evolving payloads or additional detections.