evcrone[.]com

PhishDestroy identifies evcrone.com as a crypto-draining phishing site that steals wallet credentials under the guise of a login portal. Visitors who enter their seed phrases or private keys risk immediate asset exfiltration to attacker-controlled wallets, with no on-chain recovery possible once drained. This domain was flagged with seed 5063a3 and shows alarming technical indicators: created on April 24, 2026, resolving to IP 89.124.113.53, hosted via NAMECHEAP INC, and secured via a Let’s Encrypt SSL certificate. VirusTotal currently shows 1/95 security engines detecting the threat, underscoring how quickly new phishing infrastructure can evade detection. The domain’s recent registration and clean VT score indicate an active, evolving campaign likely targeting crypto users through social engineering or malvertising. If you visited evcrone.com, disconnect from the internet immediately and revoke any session tokens or approvals granted to the site. Check wallet transaction history for unauthorized transfers and consider transferring remaining assets to a new, isolated wallet. Report the domain to PhishDestroy for deactivation and monitor your address on-chain for suspicious activity.