Is x-pad365.geomax-positioning.com a scam?

Our automated security review found no threat indicators on x-pad365.geomax-positioning.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is x-pad365.geomax-positioning.com safe to use?

x-pad365.geomax-positioning.com passed our automated security checks with a trust score of 90/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does x-pad365.geomax-positioning.com have a valid SSL certificate?

Yes. x-pad365.geomax-positioning.com presents a valid TLSv1.2 certificate issued by Amazon · Amazon RSA 2048 M01, expiring in 172 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the x-pad365.geomax-positioning.com domain?

x-pad365.geomax-positioning.com is 18.3 years old, registered on 3/10/2008 through CSC Corporate Domains, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has x-pad365.geomax-positioning.com been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report x-pad365.geomax-positioning.com as clean.

Is x-pad365.geomax-positioning.com on any phishing or malware blacklists?

No. x-pad365.geomax-positioning.com is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is x-pad365.geomax-positioning.com hosted?

x-pad365.geomax-positioning.com resolves to an IP operated by Amazon Data Services Ireland Limited in IE (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the x-pad365.geomax-positioning.com report updated?

We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Security Review

Is x-pad365.geomax-positioning.com legit or a scam?

Name: Is x-pad365.geomax-positioning.com legit or a scam?
Item: x-pad365.geomax-positioning.com
Rating: 5
Author: MalwareTips

Our verdict:Safe· 90/100

SafeSuspiciousDangerous

Official X-PAD 365 cloud platform by GeoMax AG (Hexagon subsidiary) — 18-year-old domain, clean security scan, active Swiss business registration, positive user feedback.

Why we trust it

Domain registered 18 years ago, consistent with an established business.Valid SSL certificate issued by Amazon; hosting IP has zero abuse reports.Zero detections across 92 antivirus engines; clean browser blocklists.

x-pad365.geomax-positioning.comScanned 1h ago

Post Facebook

Trust score

SAFE

Heuristics 85·MT 92

Category tags

saas platformcloud servicesbusiness software98% MT confidence

Warning signals (1)

Redirects to another domain

Positive signals (5)

Antivirus clear Not on major blacklists Domain is 18 years old Encrypted connection Clean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

18 years old

Registered Mar 10, 2008

MT Intelligence

Safe

Low likelihood · 98% confidence

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Low scam likelihoodengineMT · Guardiantrust92/100

MT AgentLive web researchVisual inspection

Confidence

This is the legitimate X-PAD 365 web platform operated by GeoMax AG, a registered Swiss company (CHE-114.263.434) specializing in surveying and construction software. The domain has been active for 6,663 days (approximately 18 years), which aligns with a long-established business. Our antivirus network flagged zero detections across 92 engines, the hosting IP has zero abuse reports, and SSL is valid and current. The page displays professional SaaS marketing with consistent Hexagon branding, no deceptive elements, and standard navigation. Web research confirmed GeoMax AG is an active, legitimate entity based in Widnau, Switzerland, and is part of the Hexagon group. Reddit users praise X-PAD software as intuitive and high-quality, and no scam reports or complaints were found across any source. The subdomain x-pad365.geomax-positioning.com is officially documented in GeoMax's own materials as their cloud login and registration endpoint.

Full dossier

Analysis complete

Page Content

The page presents X-PAD 365 as a cloud-based file manager, collaboration, and asset-management platform for surveyors and construction professionals. It includes standard SaaS marketing elements: feature overview, call-to-action buttons (Try now, Log-in), product screenshots, and a professional footer with copyright attribution to Hexagon (2026). No urgency tactics, fake trust badges, countdown timers, or deceptive overlays are present.

Infrastructure

Domain age: 6,663 days (~18 years). Registrar: CSC Corporate Domains, Inc. SSL certificate is valid (Amazon RSA 2048 M01) with 172 days to expiry. Hosting IP 34.252.55.243 has zero abuse reports and an abuse score of 0/100. The page loads external resources from cdn.cookielaw.org and hexagon.com, both legitimate third-party services.

Domain History

The subdomain x-pad365.geomax-positioning.com is an official endpoint of GeoMax AG's primary domain geomax-positioning.com. GeoMax AG is registered in the Canton of St. Gallen, Switzerland (CHE-114.263.434) and is a subsidiary of Hexagon AB. The long domain age and consistent business registration indicate a stable, established operation.

Web Reputation

Zero scam reports or complaints found across web searches, Reddit, or review aggregators. Positive user feedback on Reddit describes X-PAD software as intuitive and high-quality. Official product documentation, webinars, and news articles from 2021 onward confirm active, legitimate use. Independent trust-rating sites returned no data (N/A), which is typical for B2B SaaS platforms not targeted by consumer-review sites.

Positive Signals

Domain registered 18 years ago, consistent with an established business.
Valid SSL certificate issued by Amazon; hosting IP has zero abuse reports.
Zero detections across 92 antivirus engines; clean browser blocklists.
GeoMax AG is a registered, active Swiss company (CHE-114.263.434) part of Hexagon AB.
Positive user reviews on Reddit praising X-PAD software quality and usability.

AI Recommendation

This is a legitimate business platform. Users can safely log in, register for trials, and use X-PAD 365 services. No security concerns are present.

Next-gen fraud intelligence

Evidence-backedCross-checked

Website Preview

LIVE RENDER

x-pad365.geomax-positioning.com

1Professional layout with consistent branding (X-PAD 365 / Hexagon) including logo, navigation, hero section, and footer legal links

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

Low visual risk

Visual red flags detected in the screenshot

Page presents as the legitimate X-PAD 365 cloud platform by Hexagon, with professional design, consistent branding, and standard SaaS marketing structure. No scam indicators are visible.

Visual risk5/100

What our vision model saw

5 signals

Professional layout with consistent branding (X-PAD 365 / Hexagon) including logo, navigation, hero section, and footer legal links

Footer clearly attributes copyright to Hexagon (2026), a known legitimate geospatial/software company

Standard navigation with Features, Try now, and Log-in links — no deceptive elements visible

No urgency tactics, countdown timers, fake trust badges, or suspicious overlays present

Product screenshot (file manager UI) displayed in Overview section consistent with legitimate SaaS marketing

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for x-pad365.geomax-positioning.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

18 yrs

Registered Mar 2008

Business registration

Active · Switzerland

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

3 positive

Key findings

7 headline facts from open-web research

x-pad365.geomax-positioning.com is an official subdomain of geomax-positioning.com, the website of GeoMax AG (part of Hexagon), used for X-PAD 365 cloud platform login, registration, and services.
GeoMax AG is a legitimate Swiss company (CHE-114.263.434) based in Widnau, Switzerland, specializing in surveying and construction instruments/software.
X-PAD 365 is GeoMax's official web-based cloud platform for data management, collaboration, storage, sync, and backups for surveyors and construction professionals.
No scam reports, complaints, or negative mentions found across web searches, Reddit, or review sites.
Positive user feedback on Reddit describes X-PAD software as intuitive and high-quality; official product pages, webinars, tutorials, and news from 2021 onward confirm active legitimate use.
Domain age of 6663 days (~18 years) aligns with long-established company presence; Sur.ly and other checkers flag the subdomain as non-malicious.
Official references include cookie policies listing auth.x-pad365.geomax-positioning.com, trial registration links (reg.x-pad365.geomax-positioning.com), and PDF documentation.

Positive reviews (3)

Quotes indicating the site is legitimate.

geomax-positioning.comopen
"X-PAD 365, the web-based GeoMax cloud platform, was created to address data management and collaboration challenges surveyors and construction professionals"
Reddit (r/Surveying)open
"The X-pad is the best field software I have ever used. So easy and intuitive."
mundogeo.comopen
"GeoMax introduces new X-PAD 365 service platform"

Business registration

Status: active · Switzerland

GeoMax AG, registered in Canton of St. Gallen under CHE-114.263.434; part of Hexagon AB; address Espenstrasse 135, CH-9443 Widnau

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Web research confirmed that x-pad365.geomax-positioning.com is an official subdomain of GeoMax AG, a registered Swiss company (CHE-114.263.434) based in Widnau, Switzerland, and a subsidiary of Hexagon AB. X-PAD 365 is GeoMax's legitimate cloud platform for data management, collaboration, and asset tracking used by surveyors and construction professionals. Positive user feedback on Reddit praises X-PAD software as intuitive and high-quality. Official product documentation, webinars, and news articles from 2021 onward confirm active, legitimate business operations. No scam reports, complaints, or negative mentions were found across web searches, Reddit, or review sites.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious59Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Sandbox Render

Sandbox capture incomplete — no traffic recorded

Requests made0

Unique IPs0

Countries0

Detected brandsNone

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.

Domain & Encryption

Domain History

Age18 years old

RegistrarCSC Corporate Domains, Inc.

RegisteredMar 10, 2008

ExpiresMar 10, 2027

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.2

IssuerAmazon · Amazon RSA 2048 M01

ExpiresNov 27, 2026 (172d)

Self-signedNo

Hosting & Technology

HostingAmazon Data Services Ireland Limited

Server locationIE

Redirect Chain

Hops

Cross-domain

Yes

Lookalike

Punycode

1308http://x-pad365.geomax-positioning.com/
2302https://x-pad365.geomax-positioning.com/
3302https://auth.x-pad365.geomax-positioning.com/connect/authorize?client_id=hx.web.cs.xpad365&redirect_uri=https%3A%2F%2Fx-pad365.geomax-positioning.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20hx365.user.data%20offline_access%20FA_04%20FA_05%20FA_09%20FA_06%20FA_07%20FA_08%20FA_10%20FA_11%20FA_12%20FA_13%20FA_14&response_mode=form_post&nonce=639165104247984972.YThmNGYwNjYtYjJkMy00ZWVkLTg3MTgtYzEwYjJjN2UzZmI2ZGQxNTc1N2EtYTNhNS00YWFiLWFiN2EtOTNjOGJkNWNkYjIx&state=CfDJ8JYgigyBJlhIrutk_e2zPUcdp5mRsLFMYsw8EoctoZoFQM11ht9yJJTtJ3-EW3bijtKZXSq8XvRWBEnDLVWr-0KozuYbMmROI2nKLl_8qcPMnfxE8uJ5e-7EFD9Ki4QTGzIYdgC1OqyGJZicWI69mdIyLlU3e1ubEfQR_GbdFjxp90YsbgLaV3Rt8Aj1WoI3im1-8jRljdOQ1NTmMALPD6C2cyXBFgjgMd1lLcJh-uIj9ahjoXVHqhOEhrLNerIAHlZencuR5v2yLrfukfSMZk_3PHYCpquPRcbXvfb1bQPLW2NkvbPrVAhLqiqcs_4LqQ&x-client-SKU=ID_NET8_0&x-client-ver=7.1.2.0cross-domain
4200https://auth.x-pad365.geomax-positioning.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dhx.web.cs.xpad365%26redirect_uri%3Dhttps%253A%252F%252Fx-pad365.geomax-positioning.com%252Fsignin-oidc%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520hx365.user.data%2520offline_access%2520FA_04%2520FA_05%2520FA_09%2520FA_06%2520FA_07%2520FA_08%2520FA_10%2520FA_11%2520FA_12%2520FA_13%2520FA_14%26response_mode%3Dform_post%26nonce%3D639165104247984972.YThmNGYwNjYtYjJkMy00ZWVkLTg3MTgtYzEwYjJjN2UzZmI2ZGQxNTc1N2EtYTNhNS00YWFiLWFiN2EtOTNjOGJkNWNkYjIx%26state%3DCfDJ8JYgigyBJlhIrutk_e2zPUcdp5mRsLFMYsw8EoctoZoFQM11ht9yJJTtJ3-EW3bijtKZXSq8XvRWBEnDLVWr-0KozuYbMmROI2nKLl_8qcPMnfxE8uJ5e-7EFD9Ki4QTGzIYdgC1OqyGJZicWI69mdIyLlU3e1ubEfQR_GbdFjxp90YsbgLaV3Rt8Aj1WoI3im1-8jRljdOQ1NTmMALPD6C2cyXBFgjgMd1lLcJh-uIj9ahjoXVHqhOEhrLNerIAHlZencuR5v2yLrfukfSMZk_3PHYCpquPRcbXvfb1bQPLW2NkvbPrVAhLqiqcs_4LqQ%26x-client-SKU%3DID_NET8_0%26x-client-ver%3D7.1.2.0cross-domain

Server Reputation

Hosting

CountryUnknown

NetworkUnknown

IP addressUnknown

Abuse Intelligence

Confidence score0%

Reports on file0

ISPAmazon Data Services Ireland Limited

Usage typeData Center/Web Hosting/Transit

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on x-pad365.geomax-positioning.com and not a lookalike like x--pad365.geomax-positioning.com.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

cdn.cookielaw.org hexagon.com geomax-positioning.com

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review found no threat indicators on x-pad365.geomax-positioning.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
x-pad365.geomax-positioning.com passed our automated security checks with a trust score of 90/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
Yes. x-pad365.geomax-positioning.com presents a valid TLSv1.2 certificate issued by Amazon · Amazon RSA 2048 M01, expiring in 172 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
x-pad365.geomax-positioning.com is 18.3 years old, registered on 3/10/2008 through CSC Corporate Domains, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
No. All 92 antivirus engines in our malware network report x-pad365.geomax-positioning.com as clean.
No. x-pad365.geomax-positioning.com is not currently listed on the major browser blocklist feeds that modern browsers use.
x-pad365.geomax-positioning.com resolves to an IP operated by Amazon Data Services Ireland Limited in IE (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

Final Verdict

Trust / 100

Final Verdict·x-pad365.geomax-positioning.com

SAFE

X-PAD 365 is the official cloud platform by GeoMax AG, a legitimate Swiss surveying-software company part of Hexagon. The domain is 18 years old, hosts valid SSL, carries zero malware detections, and is backed by positive user reviews and active business registration.

This is a legitimate business platform. Users can safely log in, register for trials, and use X-PAD 365 services. No security concerns are present.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Safe reports

auth.impacprequal.co.nz

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.