near-3x[.]quest

This report details the technical threat posed by the domain near-3x.quest. The site’s page title, "NEAR Protocol | Pool Event," combined with its impersonation of the NEAR brand and classification as an impersonation scam, indicates it was designed to deceive users into believing it is a legitimate NEAR Protocol event. The primary threat is credential or asset theft, as such sites typically aim to steal login details or cryptocurrency wallet information from victims seeking to participate in a fake pool event.

Technical evidence confirms the site is malicious. VirusTotal analysis shows 6 out of 95 vendors flagged it as malicious, with detections from CyRadar, Fortinet, Google Safebrowsing, Gridinsoft, and Lionic. It appears on 3 blocklists. The domain was created on 2026-02-21, hosted on IP address 5.189.161.88 in France, associated with AS51167 Contabo GmbH. The SSL certificate is R13.

The domain is currently down or offline. Its risk level is high, supported by a GridinSoft trust score of 0/100 and a DOM risk score of 63. Despite being offline, the domain poses a residual threat if reactivated, and users should avoid any interaction with it.