Verdict
bitnestpips.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Marketing landing page for 'Remedy' CFD broker offering trading in Forex, CFDs and cryptocurrencies, copy trading and multiple tiered investment plans with specific per-trade return figures. Contains strong revenue/return promises and calls to deposit funds; lacks visible independent regulatory documentation or verifiable audit evidence in the provided text. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 8 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 2% confidenceAbuseIPDB, 17 reports; shared hosting inflates reports | Clear |
| Domain age | 10 months oldMost scam domains are under a year old | Watch |
| Web archive | Archived since 202645 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is a marketing landing page for “Remedy,” presented as an online CFD brokerage and trading platform offering access to Forex, cryptocurrencies, commodities, indices, shares, ETFs, copy trading, automated trading, and investment plans. Its apparent business model is to attract users to create accounts and deposit funds for managed or self-directed trading activity.
Scam/Impersonation Risk
The site presents a critical sensitive-interaction risk. Confirmed blacklist status and multiple external malicious detections are decisive contradictions, although the available evidence does not establish brand impersonation or a conflicting legal identity. The homepage also combines deposit solicitation and custodial control of funds with guaranteed or aggressive return claims, tiered investment plans, and insufficient supporting evidence of independent audits or equivalent safeguards. Reports associated with the hosting IP are attributed to shared infrastructure, so they do not by themselves establish that the site operator caused those reports; they nevertheless add adverse context alongside the confirmed blacklist and page-level risk signals.
- The homepage markets CFD, Forex, cryptocurrency, copy-trading, and tiered investment-plan services while encouraging account creation and deposits.
- The homepage content records seven risk indicators, including guaranteed returns, aggressive yield promises, deposit-before-service, custodial fund control, opaque value flow, and a high-stakes evidence gap.
- External reputation checks recorded 8 malicious and 3 suspicious detections, with confirmed blacklist status; the associated IP had 17 abuse reports attributed to shared hosting infrastructure.
- The domain was registered in 2025 and is approximately 0.87 years old; archival coverage records 45 snapshots across 1 tracked year, with both the first and last recorded snapshot dated 2026-07-05.
Regulatory Verification Notes
The site includes a “Legal & Regulation” navigation path, but the supplied page content does not show an independently verifiable license, registration number, regulator, or audit record. That is a material verification gap for a platform soliciting deposits and presenting investment returns, separate from the confirmed reputation contradictions. The apparent connection to the “Remedy” brand remains likely rather than independently verified; social links alone do not establish the legal identity of the operator. The available broker-reputation context contains no match, but that is not a licensing or regulatory determination.
- The homepage links to “Legal & Regulation,” “About Us,” “FAQ,” and “Contact,” but the captured content does not provide visible regulator or license details.
- The site’s hosting resolves through AS153568, identified as NEWDHAKAHARDWARE-AS-AP - NEW DHAKA HARDWARE, BD.
- The site uses a DV TLS certificate issued by YR2, valid until 2026-12-16.
- Domain registration lists TuringSign Inc. d/b/a Cosmotown as registrar.
What to Verify Next
Before any account creation, credential submission, deposit, or trading activity, an independent regulator registry should confirm the operator’s legal name, authorization, and permitted services. The legal and contact pages should be compared with independently sourced corporate and regulatory records rather than relying on the site’s own claims. Any proposed payment route, custody arrangement, withdrawal terms, and dispute process should also be validated through an independent channel, with passive review limited to information that does not require credentials or funds.
- The homepage contains “Create Account” and “Login” calls to action alongside deposit-oriented trading services.
- The site provides dedicated “Legal & Regulation,” “About Us,” “FAQ,” and “Contact” navigation points for independent cross-checking.
- The captured page identifies the business as a broker or trading platform but does not itself establish authorization to provide those services.
Summary Verdict
The overall posture is critical risk, with confirmed external reputation contradictions compounded by a high-risk deposit-based investment model and unresolved operator verification. The available evidence does not support treating the site as suitable for sensitive interaction, financial activity, or credential use.
Infrastructure Integrity
The site resolves directly to a single likely origin IP, with no detected CDN or WAF and no edge-IP layer identified. This provides limited protective separation between the website and its hosting environment and supplies no meaningful mitigation against the adverse reputation findings.
Closing Assessment
The appropriate course is to restrict activity to passive review and avoid login, credential submission, deposits, trading, or downloads until the operator, authorization, and payment protections are independently confirmed.
Written analysis generated 2026-10-01 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, page content, hosting and network, several checks together.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Page content
- The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
04 Several checks together
- Several independent checks pointed to risk at the same time.Several checks together
rule:HYB_MULTIPLE_MODULES_HIGH_RISK
Signals weighed against the site
- AbuseIPDB: 17 reports on hosting IP 163.61.188.7 (Leads Globe, Data Center/Web Hosting/Transit), 2% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 76/100 |
| Identity verification confidence | 76% |
- Trusted social count=2
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of bitnestpips.com.
- The request stayed on bitnestpips.com. It was not redirected to another domain. Clear
- Registration is published under TuringSign Inc. d/b/a Cosmotown. Clear
- DNS for this domain is served by lytehosting.com, across 4 name servers. Noted
- The registration is paid up to 2026-11-16. Noted
- The earliest public archive of this site is from 2026-07-05. Clear
- It is hosted on NEWDHAKAHARDWARE-AS-AP, from a server in BD. Noted
Domain intelligence
| Registrar | TuringSign Inc. d/b/a Cosmotown |
|---|---|
| Hosting | NEWDHAKAHARDWARE-AS-AP - NEW DHAKA HARDWARE, BD |
| Country | BD |
| Server IP | 163.61.188.7 |
| Name servers | DNS1.LYTEHOSTING.COM, DNS2.LYTEHOSTING.COM, DNS3.LYTEHOSTING.COM, DNS4.LYTEHOSTING.COM |
| CDN / edge network | Not detected |
| Resolved IP addresses | 1 |
| Edge IP addresses | 0 |
| Likely origin IP addresses | 1 |
| SSL issuer | YR2 |
| SSL expiry | 2026-12-16 |
| Domain age | 0.87 years (continuous registration) |
| Domain expiry | 2026-11-16 |
| Archive first seen | 2026-07-05 |
| Archive snapshots | 45 |
| Reputation | VirusTotal: 8 flagged | AbuseIPDB: 2% confidence, 17 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about bitnestpips.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.