lido-elhereum-fi[.]typedream[.]app

PhishDestroy identifies lido-elhereum-fi.typedream.app as a phishing domain impersonating Ethereum Lido staking services. This site employs a drainer kit to deceive users into connecting cryptocurrency wallets and authorizing fraudulent token approvals. The domain mimics Lido’s branding to trick visitors into surrendering control of their digital assets under the guise of staking or rewards. This domain resolves to IP 188.114.96.3 and operates under Google Trust Services’ SSL certificate. VirusTotal reports 2/95 detections, indicating it remains under the radar of major antivirus engines. The domain was created recently and is currently flagged by MetaMask, SEAL, and at least 2 security blocklists. While the registrar is not specified, its association with the typedream.app subdomain suggests a potentially disposable or newly registered hosting setup. The domain remains active despite blocklist coverage, posing an ongoing risk to users engaging with Ethereum staking interfaces. Immediate recommendations include avoiding this domain entirely and verifying any Lido-related URLs through official channels such as lido.fi. Users who may have interacted with this site should revoke any wallet approvals via tools like revoke.cash and monitor accounts for unauthorized transactions. Remaining risk is high given the absence of detections and the domain’s active status.