emcd[.]ink

PhishDestroy identifies emcd.ink as an active crypto-wallet phishing domain engineered to harvest private keys and seed phrases. The page masquerades as an official crypto service, luring victims to input sensitive authentication details that are immediately exfiltrated to attacker-controlled infrastructure. Once credentials are captured, threat actors drain connected wallets and drain tokens in minutes, often before the victim realizes the compromise.

This domain was flagged by just 1 of 95 VirusTotal security vendors on record, registered through NAMECHEAP INC on April 22, 2026, and appears on a single blocklist. Infrastructure analysis shows the site resolves to IP 89.124.79.217 and holds a valid Let’s Encrypt SSL certificate, which increases its perceived legitimacy to unsuspecting users.

If you visited emcd.ink, immediately revoke any wallet permissions granted to the site, transfer remaining funds to a clean wallet, and rotate all private keys or seed phrases exposed during the visit. Use a reputable crypto-security tool to scan for lingering malware, then monitor on-chain activity for unauthorized transfers. Report the domain to your wallet provider and relevant phishing takedown initiatives to help protect others.