stake-s1[.]eu[.]com

Analysis of the domain stake-s1.eu.com confirms its classification as a crypto scam impersonating Lido, a known decentralized finance platform. The domain was registered on February 21, 2026, through Instra Corporation Pty Ltd and is currently offline. Infrastructure analysis reveals it resolved to 188.114.96.3, an IP address hosted by Cloudflare, Inc. (AS13335) in the United States. The domain's nameservers (ns1.centralnic.net, ns2.centralnic.net, ns3.centralnic.net, ns4.centralnic.net) and MX records (eu-com-wildcard-null-mx.centralnic.net) align with CentralNic infrastructure, commonly observed in phishing operations.

The page title, 'Gastronomy Lido Finance Point - Fine Dining Experience,' is inconsistent with Lido's branding, suggesting an attempt to obfuscate the site's true purpose or evade automated detection. The domain appears on one security blocklist (PhishDestroy) and is flagged by 3 of 93 security vendors on VirusTotal, indicating moderate detection coverage. Gridinsoft assigns a trust score of 0/100, further supporting its malicious classification. The SSL certificate (E6) provides no additional trust signals, as it is a low-assurance Cloudflare-issued certificate.

While the domain is currently offline, defenders should treat any reactivation as high-risk. Historical DNS and WHOIS records should be preserved for forensic analysis. Organizations targeting Lido users should proactively block this domain at the network and endpoint levels, as well as monitor for related infrastructure (e.g., subdomains, newly registered lookalike domains). The exact content and functionality of the site remain unanalyzed, but the available evidence confirms its role in a crypto scam operation.