lidia-kitchen[.]pages[.]dev

lidia-kitchen.pages.dev is a confirmed phishing domain hosted on Cloudflare Pages that delivers a Google Trust Services impersonation kit designed to drain cryptocurrency wallet credentials. The site adopts the visual identity of Google Trust Services to deceive visitors into entering sensitive wallet information or downloading malicious wallet drainers. No specific drainer kit hash or campaign ID has been released yet, but forensic feeds indicate generic JavaScript-based credential harvesting scripts injected into the page.

Domain forensic evaluation reveals exact technical indicators: VirusTotal detection score of 1 out of 95 security vendors (1.05%), registered through Cloudflare, Inc., resolving to IP 172.66.44.79, and secured with a Google Trust Services SSL certificate. The domain was created under a Cloudflare Pages subdomain structure, lacks an independent WHOIS creation date due to proxy registration, and shows no listing on Google Safe Browsing (GSB) or major blocklists as of evaluation time. This low detection profile suggests a recently activated campaign leveraging Cloudflare’s infrastructure to evade early detection.

As of analysis, lidia-kitchen.pages.dev remains active and responsive. PhishDestroy has flagged this domain with unique seed 7bad39 and elevated risk level due to active crypto drainer deployment. Users are advised to avoid interaction and verify any site using PhishDestroy’s real-time scanning. Remaining risk is elevated given the use of trusted SSL certificates and CDN infrastructure, enabling continued operation until takedown or delisting occurs. Immediate avoidance is strongly recommended to prevent credential theft or wallet drainage.