Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
genesisnestx.com shows high-risk / scam indicators.
| What this site appears to be | Marketing site for 'Genesis Nestx' offering CFD/forex/crypto trading with multiple investment plans that promise high per-trade returns and require deposits. Claims regulation and fund protection are present but unverifiable from page content; several plans list implausible returns and low-minimum deposits, indicating high structural risk. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 15 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Listed as unsafeGoogle | Risk |
| Abuse reports on the host | 100% confidenceAbuseIPDB, 257 reports; shared hosting inflates reports | Risk |
| Domain age | 2 months oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 202646 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Google, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Genesis Nestx is a marketing-led online CFD and investment platform presenting access to forex, cryptocurrencies, shares, indices, commodities, ETFs, copy trading, automated trading, and packaged investment plans. Its apparent business model is to solicit client deposits for trading and managed investment services while promoting trading tools, account registration, and deposit functionality.
Scam/Impersonation Risk
The site presents a critical sensitive-interaction risk. Its homepage promotes CFD, forex, and cryptocurrency trading alongside investment plans promising high per-trade returns, while requiring deposits before service delivery. The combination of guaranteed or aggressive return claims, custodial control of funds, unclear value generation, and a login/sign-up/deposit workflow creates a material risk of financial loss and credential exposure. External security services identify the domain as malicious or unsafe: Google Safe Browsing reports a malicious match, the domain is blacklisted by multiple sources, and 15 security detections classify it as malicious, with three additional suspicious detections. These findings are decisive even though no brand impersonation or conflicting legal-entity names were observed. Evidence:
- The homepage describes CFD, forex, cryptocurrency, copy-trading, and automated-trading services and provides login, sign-up, and deposit functions.
- The homepage presents investment plans with high-return claims and low-minimum deposits, while the site content does not provide commensurate evidence supporting those claims.
- External reputation checks record a Google Safe Browsing malicious result, 15 malicious detections, three suspicious detections, and a confirmed blacklist status.
- The hosting IP, 163.61.188.5, has 257 abuse reports attributed to shared provider infrastructure operated by Leads Globe; this is an infrastructure reputation signal rather than proof that the site operator generated every report.
Regulatory Verification Notes
The site claims to be regulated, secure, professional, and to provide fund protection, but the available page content does not substantiate those claims with a verifiable regulator, licence number, or clearly identified legal entity. This is a significant regulatory verification gap for a platform soliciting deposits and presenting investment returns. The domain is newly established, and its available historical record provides limited evidentiary support for an established financial-services operation. No matching broker signal was identified in the supplied third-party broker context, but that absence is not a regulatory determination. Evidence:
- The homepage and “Legal & Regulation” navigation claim regulation and fund protection, but no verifiable licence authority or licence number is supplied in the captured content.
- The domain was registered in 2026 through TuringSign Inc. d/b/a Cosmotown and is approximately 0.16 years old.
- The available archive contains 46 snapshots spanning 2026–2026, with 1 year tracked.
- The site’s legal, company, and regulatory presentation does not establish an independently verified operator identity or regulated status.
What to Verify Next
Before any sensitive interaction, an independent check should confirm whether the claimed business is authorised by the relevant financial regulator for the jurisdictions in which it solicits customers. The legal entity, licence number, beneficial ownership, withdrawal terms, custody arrangements, and client-fund protections should be verified through regulator-controlled records and independently sourced contact channels rather than through links or contact details supplied by the site. Financial institutions should also assess whether the domain and associated infrastructure are blocked by their security controls before permitting access.
- The site’s “Legal & Regulation” and company pages are the appropriate locations to reconcile its stated legal identity and regulatory claims with an authoritative registry.
- The homepage’s account and deposit workflow makes independent confirmation of withdrawal, custody, and payment-protection terms necessary before any financial interaction.
- The presence of a login form and sensitive deposit functionality warrants separate credential-exposure and payment-risk review by the relevant security team.
Summary Verdict
The overall posture is critical and unsuitable for sensitive interaction. The convergence of confirmed external threat detections, deposit-before-service mechanics, unsupported financial claims, and insufficiently substantiated regulatory assertions outweighs the site’s ordinary marketing content and valid transport encryption.
Infrastructure Integrity
The site resolves directly to a single apparent origin address rather than a detected CDN or WAF edge, so the hosting layer provides limited protective separation. The server is associated with a Bangladesh-based hosting organisation, and the available certificate is domain-validated only; these facts describe infrastructure posture and do not establish legitimacy. Evidence:
- Hosted on AS153568, NEWDHAKAHARDWARE-AS-AP - NEW DHAKA HARDWARE, BD, with server IP 163.61.188.5 in Bangladesh.
- No CDN or WAF vendor was detected; one likely origin IP was identified.
- TLS certificate issued by YR2 at DV validation level, valid to 2026-11-04.
Closing Assessment
The appropriate disposition is to restrict activity to passive observation only and prohibit login, credential submission, account creation, deposits, downloads, or other sensitive actions unless independent regulatory and security checks materially change the assessment.
Written analysis generated 2026-10-04 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, several checks together.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL - The server address behind this site has a strong record of abuse reports.External reputation
rule:EXT_ABUSEIP_SEVERE
02 Page content
- A form on the page submits to a destination TrustSniffer could not verify.Page content
rule:PAGE_FORM_UNTRUSTED_DEST - The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW
03 Several checks together
- Several independent checks pointed to risk at the same time.Several checks together
rule:HYB_MULTIPLE_MODULES_HIGH_RISK
Signals weighed against the site
- AbuseIPDB: 257 reports on hosting IP 163.61.188.5 (Leads Globe, Data Center/Web Hosting/Transit), 100% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 76/100 |
| Identity verification confidence | 76% |
- Trusted social count=2
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of genesisnestx.com.
- The request stayed on genesisnestx.com. It was not redirected to another domain. Clear
- Registration is published under TuringSign Inc. d/b/a Cosmotown. Clear
- DNS for this domain is served by lytehosting.com, across 4 name servers. Noted
- The registration is paid up to 2027-08-06. Noted
- The earliest public archive of this site is from 2026-08-09. Clear
- It is hosted on NEWDHAKAHARDWARE-AS-AP, from a server in BD. Noted
Domain intelligence
| Registrar | TuringSign Inc. d/b/a Cosmotown |
|---|---|
| Hosting | NEWDHAKAHARDWARE-AS-AP - NEW DHAKA HARDWARE, BD |
| Country | BD |
| Server IP | 163.61.188.5 |
| Name servers | DNS1.LYTEHOSTING.COM, DNS2.LYTEHOSTING.COM, DNS3.LYTEHOSTING.COM, DNS4.LYTEHOSTING.COM |
| CDN / edge network | Not detected |
| Resolved IP addresses | 1 |
| Edge IP addresses | 0 |
| Likely origin IP addresses | 1 |
| SSL issuer | YR2 |
| SSL expiry | 2026-11-04 |
| Domain age | 0.16 years (continuous registration) |
| Domain expiry | 2027-08-06 |
| Archive first seen | 2026-08-09 |
| Archive snapshots | 46 |
| Reputation | VirusTotal: 15 flagged | AbuseIPDB: 100% confidence, 257 reports | Google Safe Browsing: 1 match |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about genesisnestx.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.