eigen-layer-site[.]github[.]io

PhishDestroy identifies eigen-layer-site.github.io as an active brand impersonation posing as EigenLayer, a well-known Ethereum restaking protocol. This domain uses GitHub’s infrastructure to appear legitimate while distributing malicious content. The site’s goal is to trick users into entering sensitive credentials or downloading harmful software by exploiting EigenLayer’s reputation. This domain was flagged by PhishDestroy due to clear impersonation tactics tied to EigenLayer. Security analysis reveals the site relies on GitHub, Inc. for registration and uses a Let’s Encrypt SSL certificate to appear secure. It currently resolves to IP address 185.199.108.153 and has been detected by only 1 out of 95 VirusTotal security vendors, suggesting new or evasive threat behavior. If you visited this site, do not enter any login details, wallet addresses, or private keys. Disconnect from the internet temporarily to prevent potential malware download or credential theft. Clear your browser cache and cookies related to EigenLayer or Ethereum services. If you entered sensitive information, change all related passwords immediately and revoke any exposed API keys or wallet permissions. Report the domain to GitHub and EigenLayer’s official security channels to aid takedown efforts. Stay vigilant: always verify URLs through official EigenLayer channels before interacting.