projecteligiblity[.]space

This domain, projecteligiblity.space, was identified as a brand impersonation threat targeting Metamask, a cryptocurrency wallet service. The site presented itself under the title 'Rewards | Project Merlin,' likely attempting to deceive users into believing they were interacting with a legitimate rewards or airdrop program associated with Metamask. Such schemes often aim to harvest credentials, private keys, or trick users into authorizing malicious transactions, leading to unauthorized access or asset theft. Analysis indicates the domain was registered on November 13, 2025, through NameCheap, Inc. and resolved to the IP address 104.21.62.218. It was flagged by 1 out of 95 security vendors on VirusTotal and appeared on 2 security blocklists. The domain was also blocked by ScamSniffer and PhishDestroy, further confirming its malicious intent. The Gridinsoft trust score of 0/100 underscores the high risk associated with this infrastructure. Users who visited projecteligiblity.space should immediately revoke any suspicious token approvals or connected wallet permissions using a trusted blockchain explorer or wallet interface. They should also scan their devices for malware, change passwords for any accounts accessed during the interaction, and monitor their cryptocurrency wallets for unauthorized transactions. If credentials or private keys were entered, users must migrate their assets to a new wallet and treat the compromised wallet as insecure.