apylido[.]com

Analysis of apylido.com indicates a high‑risk, active brand‑impersonation campaign targeting Lido. The domain was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure, using the nameservers and resolving to IP address 104.21.53.78, which belongs to AS13335 Cloudflare, Inc. The site presents an HTTP 307 redirect and serves a TLS certificate issued by Google Trust Services under the WE1 root, confirming the use of valid HTTPS. The page title observed is "Lido Liquid Staking," and the intelligence tags the scam type as cryptocurrency, suggesting the site may be attempting to lure users into fraudulent staking or token transactions. Five of ninety‑five VirusTotal scanners have flagged the domain, and it is listed on one external blocklist, with PhishDestroy already blocking it. While the exact page content and any credential‑capture mechanisms have not been publicly disclosed, the combination of brand impersonation, a cryptocurrency focus, and the presence on security blocklists warrants immediate defensive action. Organizations should add apylido.com to URL filtering policies, monitor DNS queries for the domain, and educate users about the risk of unsolicited Lido‑related links. Continuous re‑evaluation is recommended to detect any changes in hosting or content that could increase the threat surface.