eigenlayerxyz[.]org

PhishDestroy identifies eigenlayerxyz.org as a confirmed crypto drainer impersonating the legitimate EigenLayer protocol. This domain was registered through Spaceship, Inc. on March 10, 2025, and currently resolves to the IP address 44.233.250.75. VirusTotal analysis shows 0 detections out of 95 scanners, indicating this malicious domain remains undetected by most antivirus tools as of the latest scan.

The threat posed by eigenlayerxyz.org is significant for cryptocurrency users, particularly those familiar with EigenLayer. This domain is designed to mimic the official EigenLayer website, likely to deceive visitors into connecting their crypto wallets or entering sensitive credentials. Once a user interacts with the site, it may inject a crypto drainer script that silently transfers funds from connected wallets to attacker-controlled addresses. The lack of VirusTotal detections highlights the advanced evasion techniques employed by the attackers, making it critical for users to verify the legitimacy of URLs before any interaction.

If you have visited eigenlayerxyz.org, immediately disconnect your wallet from the site and revoke any unauthorized permissions via your wallet’s connection management interface. Do not enter any private keys, seed phrases, or wallet passwords on this domain. Report the incident to PhishDestroy for further analysis and consider transferring remaining funds to a new, secure wallet. Always verify website URLs and use trusted bookmarks for official crypto platforms to prevent falling victim to such impersonation scams.