# nestfincs.com — MALICIOUS

> nestfincs.com is an active domain under investigation for phishing. Learn about the risks and protect yourself from potential scams today.

## Summary
PhishDestroy identifies nestfincs.com as a domain linked to a generic phishing campaign currently under investigation. Phishing threats like this are significant because they can deceive users into revealing sensitive data such as login credentials or financial information. Despite no current detections by security vendors, the domain's suspicious characteristics warrant caution.

The domain nestfincs.com was created recently on June 10, 2025, and is registered through Ultahost, Inc. It resolves to the IP address 192.142.10.5. Although VirusTotal scans have found zero detections so far, this is not uncommon in newly registered domains used for phishing, as such threats often emerge before widespread detection. The domain is still active, and its infrastructure suggests it may be staging phishing content or related fraudulent activities.

Users should remain vigilant and avoid interacting with emails, links, or websites associated with nestfincs.com until further clarity is provided. It is advisable to verify the legitimacy of any communications supposedly originating from this domain and refrain from submitting personal or financial information. Employing updated security solutions and monitoring account activity can help mitigate potential risks linked to this ongoing phishing investigation.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: NeST Financial - Regulated Global Forex & CFD Broker

## Domain Intelligence
- Registered: 2025-06-10 05:24:28
- Registrar: Ultahost, Inc.
- Country: US
- IP: 192.142.10.5
- Nameservers: ns1.ultahost.com ns2.ultahost.com ns3.ultahost.com ns4.ultahost.com

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/0vFcZDq/1ce431e59e25.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/bb8cb06f-a882-4dad-8340-3b5be828b6ec
- PhishDestroy: https://phishdestroy.io/domain/nestfincs.com/
- LLM endpoint: https://phishdestroy.io/domain/nestfincs.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nestfincs.com/
Last updated: 2026-03-19