Thanks for raising this. Situations like this can easily cause confusion.
For me, the safest rule of thumb is simple:
If a DApp, link, or support flow is not explicitly documented on the official Lido website, it should not be trusted — regardless of where it is shared.