lidopinodoro[.]com

The domain lidopinodoro.com is a confirmed phishing site engaged in brand impersonation targeting Lido, a cryptocurrency platform. This scam operates as a cryptocurrency phishing scheme, attempting to deceive users into disclosing sensitive information or transferring funds under false pretenses. As of the latest verification, lidopinodoro.com has been taken offline, though it previously posed an elevated risk to users.

Technical analysis reveals that lidopinodoro.com was flagged by 1 of 95 VirusTotal security vendors, specifically Gridinsoft, and appeared on 1 security blocklist, PhishDestroy. The domain was registered through GoDaddy.com, LLC on May 6, 2020, and resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. in the United States. The SSL certificate was issued by Google Trust Services (WE1). The observed page title, 'Lido | Ristorante | Lounge Bar | Pino d'Oro | ristorante mondragone | Piazza Mario Liberato Conte, 29, Mondragone, CE, Italia,' misrepresents the site as a legitimate business unrelated to its actual phishing purpose.

Users who interacted with lidopinodoro.com should immediately revoke any token approvals granted to unknown or suspicious contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts to prevent unauthorized access. Report the domain to relevant platforms, including Google Safe Browsing, PhishTank, and the impersonated brand, Lido, to aid in broader mitigation efforts. Monitor accounts for unusual activity and consider notifying local cybersecurity authorities if financial loss occurred.