lido[.]fi-connect-waallet-apps-v2[.]online

The domain lido.fi-connect-waallet-apps-v2.online is a phishing site engaged in brand impersonation targeting Lido, a cryptocurrency staking platform. It posed an elevated risk as a cryptocurrency scam designed to deceive users into disclosing wallet credentials or sensitive information, though no drainer kit was identified. The site is currently taken offline, but its prior activity classified it as unsafe for any interaction.

Technical indicators confirm the malicious nature of lido.fi-connect-waallet-apps-v2.online. As of analysis, 1 of 95 VirusTotal security vendors flagged the domain, including Trustwave. It was registered through Web Commerce Communications Limited dba WebNic.cc on August 04, 2025, and resolved to the IPv6 address 2606:4700:3031::6815:18a1, hosted on Cloudflare's infrastructure in the US. The domain appeared on 1 security blocklist (PhishDestroy) and used an SSL certificate issued by WE1. The observed page title was 'Access Denied', though prior content likely facilitated the phishing scheme.

Users who interacted with lido.fi-connect-waallet-apps-v2.online should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts, and monitor for unauthorized transactions. Report the domain to relevant platforms, including the impersonated brand (Lido), the registrar (WebNic.cc), and anti-phishing organizations such as PhishTank or the Anti-Phishing Working Group (APWG). If credentials were entered, change passwords on all associated accounts and review connected services for signs of compromise.