# eigenlayers-accont.gitbook.io — SUSPICIOUS

> Analysts uncovered eigenlayers-accont.gitbook.io impersonating EigenLayer; 0/95 VirusTotal detections as of today. Always verify domains before interacting.

## Summary
This GitBook-hosted page mimics the legitimate EigenLayer brand to trick visitors into downloading or connecting a crypto wallet, likely aiming to drain funds via a fake re-staking guide.

PhishDestroy identifies this domain as an active brand impersonation campaign targeting EigenLayer users. The site was created on March 30, 2014, registered through Cloudflare, Inc., and currently resolves to 172.64.147.209. VirusTotal shows zero detections out of 95 engines as of this advisory, indicating it remains undetected by most scanners.

If you visited this site, immediately disconnect your wallet, revoke any unauthorized permissions via tools like revoke.cash, and scan your device for malware. Report the domain to your security team or platform provider and avoid any further interaction with it.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: cloaking (HTTP ?)
- Target brand: EigenLayer
- Page title: Intro to Eigen Layer | Eigen Layer | ReStaking Web3*^^

## Domain Intelligence
- Registered: 2014-03-30 06:09:09
- Registrar: Cloudflare, Inc
- IP: 172.64.147.209

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/285be8b2-c0c4-4402-a0b0-2208697cbd5d
- PhishDestroy: https://phishdestroy.io/domain/eigenlayers-accont.gitbook.io/
- LLM endpoint: https://phishdestroy.io/domain/eigenlayers-accont.gitbook.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eigenlayers-accont.gitbook.io/
Last updated: 2026-04-12