near-free[.]com

The domain near-free.com was registered on February 21, 2026 through NameSilo, LLC and subsequently resolved to the IP address 104.21.35.113, which belongs to the Cloudflare network (AS13335) located in the United States. The site presented a page title of "NEAR | Blockchains, Abstracted" and was classified under the scam type "Wallet/Seed Phishing," indicating an attempt to harvest cryptocurrency wallet credentials or seed phrases. A Gridinsoft trust assessment assigned the domain a score of 0 out of 100, reflecting a high confidence in malicious intent. The SSL certificate associated with the site is identified as "WE1," confirming that the domain was served over HTTPS.

VirusTotal analysis recorded a single detection out of 93 security vendors, suggesting at least one vendor flagged the domain as malicious. The domain was also listed on one external security blocklist and was actively blocked by the PhishDestroy mitigation service. Current infrastructure checks show the domain is offline, having been taken down after detection.

Threat actors appear to target the brand "Across," as indicated by the impersonation label in the intelligence feed. Defenders should ensure that near-free.com is added to deny‑list rules across DNS filtering, proxy, and endpoint protection systems, monitor for newly registered domains that resolve to the same Cloudflare IP range, and watch for similar page titles or wallet‑seed phishing indicators. Continuous re‑evaluation of related threat‑intel sources is recommended to detect any resurgence or variant campaigns that reuse the underlying infrastructure or branding cues.