app[.]lido-dashboard[.]pro

This domain, app.lido-dashboard.pro, was registered on 2026‑02‑21 and is presently taken offline. The site presented the page title “www.www.app.lido-dashboard.pro” and explicitly targeted the Lido brand, employing a crypto‑scam impersonation approach. Threat intelligence sources have listed the domain on four security blocklists, namely PhishDestroy, Polkadot, Enkrypt and Codeesura, indicating that multiple industry‑focused feeds have already flagged it as malicious.

VirusTotal analysis shows that 14 of 93 scanning engines reported detections, reinforcing the suspicion of malicious intent. The domain’s status in Google Safe Browsing or OTX was not disclosed, but its inclusion on the aforementioned blocklists and the VirusTotal detections provide sufficient confidence for defensive actions. Infrastructure examination reveals no public evidence of the hosting provider, IP address, ASN, or SSL certificate, and the site returned no HTTP response because it is offline, limiting further technical fingerprinting.

The combination of brand impersonation, a crypto‑scam narrative, and the observed detection metrics categorises the threat as a high‑risk brand‑targeted campaign. Defenders should immediately add app.lido-dashboard.pro to URL filtering rules, ensure that any outbound traffic to the domain is blocked, and monitor for similar sub‑domains that reuse the “lido‑dashboard.pro” suffix. Continuous observation of blocklist updates and periodic re‑scans on VirusTotal are recommended to capture any resurgence, while user‑education campaigns should warn personnel about unsolicited requests referencing Lido and cryptocurrency transactions.