nft[.]zbctoken[.]com

This domain is flagged as an active crypto drainer phishing site, designed to exploit NFT holders by draining cryptocurrency wallets through deceptive transactions. Analysis indicates the domain is specifically crafted to mimic legitimate NFT platforms, leveraging social engineering to trick users into connecting their wallets to malicious smart contracts or scripts. Infrastructure analysis reveals the domain was registered on November 28, 2025, through HOSTINGER operations, UAB, and currently resolves to the IP address 216.198.79.1. VirusTotal reports 0/95 detections, suggesting the domain has not yet been widely flagged by security vendors. The page title, 'ZBC NFT,' further aligns with tactics used to impersonate legitimate NFT projects. No blocklist entries or trust score anomalies were identified at the time of assessment, though the domain remains under investigation for malicious activity. Mitigation steps for this threat type include immediately blocking the domain and associated IP (216.198.79.1) at the network level. Users should be advised to revoke any wallet permissions granted to nft.zbctoken.com and audit their transaction history for unauthorized activity. Organizations should monitor for connections to the domain or IP in logs and update endpoint protection rules to detect and prevent interactions with crypto drainer infrastructure. Wallet providers are recommended to flag this domain as high-risk in their transaction validation systems.