lido[.]sushi[.]baby

The domain lido.sushi.baby presents an elevated risk due to its involvement in brand impersonation targeting Lido. Analysis identifies this domain as designed to mimic the legitimate Lido brand, likely to deceive users for malicious purposes such as credential harvesting or financial fraud. The page title, 'Just a moment...', is commonly used by phishing sites aiming to add legitimacy or delay suspicion, further supporting the impersonation threat classification.

Technical evidence substantiates the threat: VirusTotal reports 5 out of 95 security vendors flagging this domain as malicious. The domain was registered on August 14, 2025, via Dynadot LLC, and is currently listed on one known security blocklist. Infrastructure checks confirm the domain resolves to IP address 104.21.8.146. The site has been taken offline, but its earlier detection and inclusion on blocklists indicate prior active abuse. Blocking action has already been implemented by at least one security solution.

Users who visited lido.sushi.baby are advised to immediately reset any credentials entered on the site and monitor their accounts for unauthorized activity. It is recommended to run a full malware scan and update passwords for any associated services. Users should also remain vigilant for potential phishing attempts referencing Lido or similar brands, and avoid interacting with suspicious domains in the future.