claim-rewards-eigenfoundation-season-2[.]pages[.]dev

This domain, claim-rewards-eigenfoundation-season-2.pages.dev, is a malicious crypto drainer designed to steal your cryptocurrency. It pretends to be a rewards claim page for EigenLayer, a legitimate staking protocol, but in reality it will trick you into connecting your crypto wallet and signing a transaction that drains your funds. The site is still active and poses a high risk to anyone who visits.

PhishDestroy's analysis reveals several red flags. The domain was created on June 11, 2024, which is very recent for a legitimate rewards page. It is registered through Cloudflare, Inc. and uses a Let's Encrypt SSL certificate from Google Trust Services, which can give a false sense of security. VirusTotal shows that only 1 out of 95 security vendors flag this domain, indicating it is not widely detected yet. However, it appears on 3 security blocklists, and the page title is simply "Loading" — a common tactic to appear harmless while the malicious script loads. The site resolves to IP 188.114.97.3, which is associated with Cloudflare's CDN, making it harder to trace.

If you have visited this site or connected your wallet, you should immediately revoke any token approvals or permissions granted. Use a tool like Revoke.cash to check and revoke allowances. Do not enter any seed phrases or private keys, and never sign transactions you did not initiate. Monitor your wallet for unauthorized transactions and consider moving funds to a new wallet if you suspect compromise. Stay safe and only interact with verified official channels for any crypto projects.