synclido[.]pages[.]dev

The domain synclido.pages.dev is a phishing site engaged in brand impersonation targeting Lido, a cryptocurrency platform. It was designed to deceive users into believing they were interacting with the legitimate Lido service, potentially leading to financial loss through cryptocurrency scams. As of the latest verification, synclido.pages.dev has been taken offline, though it previously operated without an associated drainer kit.

Technical indicators for synclido.pages.dev show limited detection at the time of analysis. The domain was registered through Cloudflare, Inc. on January 02, 2025, and resolved to the IP address 188.114.97.3, hosted by Cloudflare, Inc. in the US (AS13335). VirusTotal reported 0 of 95 vendors flagging the domain, and Google Safe Browsing did not list it as malicious. However, it appeared on 1 security blocklist, specifically PhishDestroy. No SSL certificate was observed, and the page title displayed was 'SYNC PAGES'.

Users who may have interacted with synclido.pages.dev should take immediate steps to secure their assets. For cryptocurrency-related scams, revoke any token approvals granted to unknown or suspicious contracts and transfer funds to a new wallet. If credentials were entered, change passwords for the affected accounts and enable two-factor authentication (2FA) where available. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s official security channels to aid in mitigation efforts.