# bitcoinschaffhausen.ch — SUSPICIOUS

> bitcoinschaffhausen.ch is a suspected Bitcoin brand impersonation site linked to a crypto drainer campaign.

## Summary
PhishDestroy has identified bitcoinschaffhausen.ch as a domain actively impersonating Bitcoin to deceive users into surrendering cryptocurrency. The domain is currently under investigation and remains active as of the latest assessment, with no definitive malicious verdict issued at this time.

This domain was flagged by 0 of 95 VirusTotal vendors, indicating it has not yet been widely recognized as malicious. It resolves to IP address 188.114.97.3 and is secured via a Let's Encrypt SSL certificate. The domain was registered recently and exhibits traits consistent with opportunistic impersonation, including phonetic similarity to legitimate Bitcoin-related branding. It remains unlisted on all major threat intelligence blocklists and maintains low trust scores across security platforms.

As the investigation continues, users are strongly advised to avoid visiting bitcoinschaffhausen.ch and to verify any Bitcoin-related URL using PhishDestroy’s real-time scanner. Organizations should consider blocking the domain at the network perimeter and monitoring outbound connections to 188.114.97.3. Given the observed SSL certificate usage and low detection rate, this threat may escalate rapidly as additional evidence emerges.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Bitcoin

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b85e2489-1cb6-45d5-a350-81ed79f16d17
- PhishDestroy: https://phishdestroy.io/domain/bitcoinschaffhausen.ch/
- LLM endpoint: https://phishdestroy.io/domain/bitcoinschaffhausen.ch/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bitcoinschaffhausen.ch/
Last updated: 2026-03-22