nftgeekbybone[.]com

The domain nftgeekbybone.com was a crypto drainer phishing site designed to steal cryptocurrency by tricking users into signing malicious transactions. It did not impersonate a known brand or use a publicly identified drainer kit. As of the latest verification, nftgeekbybone.com has been taken offline, but it previously posed an elevated risk to users interacting with NFT or crypto-related content.

Technical indicators show nftgeekbybone.com was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned it a trust score of 0/100. The domain was registered through NameCheap, Inc. on February 21, 2026, and resolved to the IP address 198.54.125.130, hosted on Namecheap, Inc.'s infrastructure in the US. It appeared on 1 security blocklist (PhishDestroy) and used an SSL certificate issued by Let's Encrypt (R12). The observed page title was 'Redirecting...', and the site employed Nginx and OpenResty technologies. Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with nftgeekbybone.com should immediately revoke any token approvals granted to unknown or suspicious contracts using a tool like Etherscan's token approval checker. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. If credentials were entered, change passwords and enable two-factor authentication on all related accounts. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.