lido-fi[.]io

This domain, lido-fi.io, is flagged as a crypto scam impersonating the Lido brand, based on infrastructure analysis and confirmed threat intelligence. Registered on February 21, 2026, the domain resolved to IP 151.101.193.224, hosted on AS54113 (Fastly, Inc.) in the United States. The SSL certificate, issued by GlobalSign Atlas R3 DV TLS CA 2025 Q2, does not mitigate the risk, as malicious domains frequently use valid certificates. The page title, 'Etsy Finland - Shop for handmade, vintage, custom, and unique gifts for everyone,' is inconsistent with the expected content for a crypto-related domain, suggesting either misconfiguration or deliberate obfuscation.

The domain is currently offline, but prior to takedown, it was blocked by PhishDestroy, ScamSniffer, and CryptoFirewall, and appears on three security blocklists. While no detections were reported by the 93 vendors that scanned the domain on VirusTotal, this absence does not confirm safety, as malicious domains often evade initial detection. Defenders should treat this domain as confirmed malicious infrastructure, particularly given its association with crypto scams and brand impersonation.

The domain's registration date, hosting provider, and blocklist status provide sufficient evidence to classify it as high-risk. Further investigation should focus on identifying related domains, associated wallets or payment addresses, and any residual connections to the Lido brand. If encountered in logs or network traffic, this domain should be blocked and reported to relevant threat intelligence platforms.