home-lidofinancee[.]gitbook[.]io

The domain home-lidofinancee.gitbook.io was registered on February 21, 2026 and resolves to the Cloudflare‑owned address 172.64.147.209 (AS13335, United States). It presents a Google Trust Services/WE1 SSL certificate and serves content over HTTP/3, returning an HTTP 403 status. Reputation data shows a Gridinsoft trust score of 0/100 and 13 of 95 VirusTotal scanners flag the domain as malicious. The site appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Google Safe Browsing categorises it under "SOCIAL_ENGINEERING". Nameservers dahlia.ns.cloudflare.com and hugh.ns.cloudflare.com confirm the use of Cloudflare’s DNS infrastructure. The domain is identified as a brand‑impersonation campaign targeting Lido, classified as a crypto scam. While the exact page content has not been examined, the combination of low trust scores, multiple vendor detections, and blocklist listings indicates a high‑risk threat. Defenders should block the domain at network and endpoint layers, add it to URL filtering policies, and monitor for any related indicators such as the associated IP address and Cloudflare nameservers. Continuous threat‑intel feeds should be consulted for updates, and any attempts to contact Lido users via this domain should be treated as malicious.