eigenlayer[.]mom

The domain eigenlayer.mom was registered on March 07, 2026 through Key-Systems GmbH and is currently hosted on IP address 186.2.175.35, which belongs to ASN 59692 (IQWeb FZ-LLC) in Russia. authoritative resolution is provided by the GoDaddy nameservers ns15.domaincontrol.com and ns16.domaincontrol.com. The site serves a TLS certificate issued by Let’s Encrypt (R13), indicating that HTTPS is available but does not provide any additional trust. A scan on VirusTotal returned 16 positive detections out of 91 security vendors, confirming malicious classification.

Independent security blocklists have also listed the domain, with five separate blocklists flagging it and specific blocking services—PhishDestroy, MetaMask, ScamSniffer, SEAL, and Enkrypt—actively denying access. The page title observed at the root URL reads "EigenLayer — Ethereum Restaking Protocol | Programmable Trust for the Open Internet," directly referencing the Eigenlayer brand and matching the declared target. Technology detection shows the presence of DDoS‑Guard, a service commonly used to obscure the true origin of malicious traffic. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the assessment of a high‑risk site.

The domain’s current state is offline, but its infrastructure remains observable and could be re‑activated. Defenders should continue to block the IP 186.2.175.35 and the domain eigenlayer.mom at DNS and web‑proxy layers, add the host to internal blacklists, and monitor the associated ASN for any new activity. Because the actual content of the page has not been captured, further analysis of the landing page’s markup and potential credential‑stealing forms is recommended if the site reappears. The combination of brand‑specific page title, malicious detection counts, low trust score, and presence on multiple reputable blocklists provides strong evidence that eigenlayer.mom is a high‑risk brand‑impersonation operation targeting users of the Eigenlayer protocol.