revoke-lidos[.]com

This domain, revoke-lidos.com, was registered on 12 November 2025 through OwnRegistrar, Inc. It resolves to the IPv4 address 64.233.166.84, which belongs to Google LLC (AS15169) located in Belgium. The authoritative nameservers camilo.ns.cloudflare.com and ursula.ns.cloudflare.com indicate that the domain is fronted by Cloudflare, and HTTP/3 support is observed. HTTPS is provided by a Google Trust Services certificate issued to “WE1”. An HTTP 301 redirect returns a page whose title is “Iniciar sessão – Contas Google”, suggesting a credential‑collection vector targeting Google accounts, but the threat attribution lists Lido as the impersonated brand, classifying the activity as a high‑risk crypto‑scam. The site has a Gridinsoft trust score of 0/100 and is flagged by one security blocklist. VirusTotal analysis shows one of ninety‑five AV engines marking the domain as malicious. The current risk level is high and the indicator remains active. Defenders should block the domain at the DNS or proxy layer, monitor outbound connections to the associated IP, and add the domain to any existing URL filtering rules. Further forensic analysis of the landing page content is required to confirm the exact payload and malicious intent.