claim-eigenlayer[.]vercel[.]app

The domain claim-eigenlayer.vercel.app is actively flagged for brand impersonation, targeting users of the EigenLayer brand. This domain does not appear to be using a specific drainer kit but is designed to deceive users into believing it is an official EigenLayer site, potentially leading to the theft of sensitive information such as login credentials and private keys.

Infrastructure analysis reveals that claim-eigenlayer.vercel.app has been flagged by 11 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain is registered through Tucows Domains Inc. and resolves to the IP address 64.29.17.131, which is located in the United States and is part of the AS16509 Amazon.com, Inc. network. The domain was created on February 21, 2026, and Google Safe Browsing has flagged it as a phishing site. Additionally, the domain appears on four security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. The SSL certificate is issued by Google Trust Services / WR1, which may be an attempt to add a layer of perceived legitimacy.

The domain is currently active, and users are advised to exercise extreme caution. Despite the detection by several security vendors and its inclusion in multiple blocklists, there is a risk that some users may still fall victim to this impersonation. It is recommended that users verify the authenticity of any communication or website related to EigenLayer by directly accessing the official EigenLayer website or through verified channels. Security teams should monitor this domain and consider implementing additional safeguards to protect users from potential threats.