lido[.]fi-app-wallet-connect-v3[.]live

The domain lido.fi-app-wallet-connect-v3.live is a confirmed phishing site engaged in brand impersonation targeting Lido, a cryptocurrency staking platform. It presents itself as a legitimate Lido wallet connection portal but is designed to steal user credentials or cryptocurrency assets. No drainer kit was identified, though the site operates as a cryptocurrency scam. As of the latest verification, lido.fi-app-wallet-connect-v3.live has been taken offline.

Technical indicators confirm the malicious nature of lido.fi-app-wallet-connect-v3.live. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Trustwave, and appears on 1 security blocklist (PhishDestroy). It was created on February 21, 2026, and resolves to the IP address 172.67.214.136, hosted on Cloudflare's infrastructure (AS13335). The SSL certificate is issued by WE1, and the observed page title is 'Stake with Lido | Lido'. Google Safe Browsing does not currently flag the domain, though its Gridinsoft trust score is 0/100.

Users who interacted with lido.fi-app-wallet-connect-v3.live should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts, and monitor for unauthorized transactions. Report the phishing domain to the impersonated brand (Lido) and relevant authorities, such as the Anti-Phishing Working Group (APWG) or local cybercrime units. If credentials were entered, change passwords for all associated accounts.