lidostajking[.]gitbook[.]io

This domain, lidostajking.gitbook.io, poses a significant threat of brand impersonation, specifically targeting the Lido brand. The site is designed to deceive users into believing they are interacting with a legitimate Lido staking service, potentially leading to the theft of personal information and crypto assets.

Analysis indicates that the domain was created on March 30, 2014, and is registered through Cloudflare, Inc. It resolves to the IP address 104.18.40.47, which is located in the United States and is part of Cloudflare's network (AS13335). The SSL certificate is issued by Google Trust Services / WE1, and the domain is flagged by Google Safe Browsing for phishing. Additionally, 9 out of 95 security vendors on VirusTotal have identified this domain as malicious, and it appears on one security blocklist. The site has been taken offline, but the risk remains for those who may have visited it before it was blocked.

If a user has visited lidostajking.gitbook.io, they should immediately check their Lido account for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) on all relevant accounts. Users should also monitor their financial statements and credit reports for any signs of fraudulent transactions. If any suspicious activity is detected, users should report it to Lido support and their local cybersecurity authorities.