neartestresolve[.]pages[.]dev

The domain neartestresolve.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the Cloudflare IP address 172.66.46.230, which is geolocated to California, United States. Google Safe Browsing has flagged the domain for social engineering, and sixteen of ninety‑three VirusTotal scanners have labeled it malicious, indicating a consensus among security vendors that the site is being used for illicit purposes. The site presents a HTTP 403 response and reports a Gridinsoft trust score of zero out of one hundred, reinforcing the likelihood that the content is either inaccessible or deliberately blocked to impede analysis.

Infrastructure analysis shows the domain is served behind Cloudflare with HSTS and HTTP/3 enabled, and it uses the nameservers gannon.ns.cloudflare.com and angela.ns.cloudflare.com, both typical of Cloudflare‑hosted assets. Blocklist monitoring confirms inclusion on three public blocklists, and the domain is actively blocked by PhishDestroy, MetaMask, and SEAL, suggesting that threat‑intel feeds have identified it as a crypto‑related scam. The listed scam type is "Crypto Scam," although no further detail about the specific phishing vector or victim interaction is available from the current data set.

Because the domain is currently offline, direct content inspection is not possible, leaving the exact payload or lure unknown. Defenders should continue to block the domain at perimeter firewalls and DNS filtering layers, monitor for any resurgence of the host, and correlate any outbound connections to 172.66.46.230 with existing threat‑intel. Analysts are advised to keep the domain on watchlists, update detection signatures with the observed Safe Browsing and blocklist indicators, and consider reporting any new activity to relevant industry sharing groups.