bitcoinschaffhausen[.]ch

This domain bitcoinschaffhausen.ch was registered on 23 March 2026 and is currently active. DNS resolution points to IP 188.114.97.3, which is owned by Cloudflare, Inc. The host presents a valid HTTPS certificate issued by Let’s Encrypt (E7) and returns HTTP 200 responses. Page title observed is “Bitcoin Schaffhausen – Bitcoin verstehen. Lokal begleitet.” which aligns with the declared brand target “Bitcoin” and the listed scam type “Crypto Scam”. The site employs Tailwind CSS, Cloudflare Browser Insights and HTTP/3, confirming the use of Cloudflare’s front‑end services. Nameservers katja.ns.cloudflare.com and syeef.ns.cloudflare.com are in use, and the MX record points to mta‑gw.infomaniak.ch with priority 5. VirusTotal analysis shows that 2 of 94 security vendors flagged the domain, and the Gridinsoft trust score is 0/100. The domain appears on the PhishDestroy blocklist and one additional security blocklist. Current evidence indicates a high‑risk crypto‑related impersonation campaign targeting users searching for Bitcoin information in the Schaffhausen region. No further content analysis is available, so the specific malicious payload or credential‑harvesting mechanisms remain unknown. Defenders should block the domain at network perimeter, monitor DNS queries for the domain and its associated IP, and alert users about the fraudulent use of the Bitcoin brand. Ongoing observation of the hosting infrastructure and any changes to the TLS certificate or content is recommended.