geertcoin[.]biz

The domain geertcoin.biz was a generic phishing site targeting cryptocurrency users with a fraudulent online casino theme. It posed no direct association with any legitimate brand or drainer kit but was designed to deceive victims into engaging with a cryptocurrency scam. As of the latest verification, geertcoin.biz has been taken offline, though its prior activity remains a risk for those who may have interacted with it.

Technical indicators confirm geertcoin.biz as a malicious domain. It was flagged by 2 of 95 VirusTotal security vendors, including alphaMountain.ai and Fortinet, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through Web Commerce Communications Limited on July 20, 2025, and resolved to the IP address 69.5.189.56, hosted under AS42624 (Global-Data System IT Corporation) in Switzerland. No SSL certificate was present, and the observed page title was 'GEERTCOIN | Play at the best online casino based on Blockchain'. The domain used nameservers ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserverhub.com. Gridinsoft assigned it a trust score of 0 out of 100.

Individuals who visited geertcoin.biz should assume their cryptocurrency wallet or credentials may be compromised. Revoke any token approvals granted during the suspected interaction and transfer remaining funds to a new, secure wallet. If login credentials were entered, change passwords immediately and enable two-factor authentication on all related accounts. Report the domain to relevant platforms, including Google Safe Browsing, PhishTank, and local cybercrime authorities, to aid in broader mitigation efforts.