connect-eigenlayer[.]gitbook[.]io

This domain, connect-eigenlayer.gitbook.io, was registered on April 10, 2026, and is actively impersonating EigenLayer, a known target for investment scams. Infrastructure analysis reveals it is hosted on Cloudflare infrastructure (IP 172.64.147.209) and currently returns an HTTP 403 status, indicating restricted access or a potential attempt to evade automated scanning. The domain is flagged on three security blocklists and has been explicitly blocked by multiple security providers, reinforcing its classification as high-risk. While no malicious detections were reported by scanning vendors at the time of assessment, this absence does not confirm safety, as scam domains often evade initial detection. The SSL certificate issued by Google Trust Services (WE1) is valid, but this is not uncommon for fraudulent sites leveraging cloud hosting. Defenders should treat this domain as an active threat, particularly given its association with investment scams targeting EigenLayer users. Immediate action is recommended, including blocking the domain at the network level and monitoring for related infrastructure or phishing campaigns. The exact content of the site remains unanalyzed, but its registration details, hosting provider, and blocklist status provide sufficient evidence for mitigation.