lastdist-stage[.]pages[.]dev

The domain lastdist-stage.pages.dev is a generic phishing site that posed an elevated risk prior to being taken offline. It did not impersonate a specific brand but operated as an airdrop scam, targeting cryptocurrency users with false promises of USDC token distributions. No drainer kit was identified, and the site is currently inaccessible, returning an HTTP 403 status.

Technical indicators confirm the domain's malicious intent. As of the latest scan, 15 of 95 VirusTotal security vendors flagged lastdist-stage.pages.dev, including ADMINUSLabs, alphaMountain.ai, and BitDefender. The domain was registered through Cloudflare, Inc. on March 25, 2026, and resolved to the IP address 172.66.44.211, hosted by Cloudflare in California. It appeared on two security blocklists, PhishDestroy and ScamSniffer, and used an SSL certificate issued by Google Trust Services (WE1). The observed page title was 'USDC | Airdrop', and technologies detected included Tailwind CSS, HSTS, crypto-js, and Cloudflare's infrastructure. Gridinsoft assigned the domain a trust score of 0/100.

Victims of lastdist-stage.pages.dev should take immediate action to secure their accounts and assets. Since this was an airdrop scam, users who interacted with the site should revoke any token approvals granted to unknown contracts and transfer remaining funds to a new cryptocurrency wallet. Monitor transaction histories for unauthorized activity and report the domain to relevant platforms, including Google Safe Browsing, ScamSniffer, and PhishDestroy. Additionally, consider filing a complaint with the Internet Crime Complaint Center (IC3) or local cybercrime authorities to aid in tracking such threats.