Security Review

Is capital-turn.com legit or a scam?

Our verdict:Dangerous· 5/100

13-day-old HYIP scam site impersonating a legitimate investment company, promising guaranteed daily returns and accepting cryptocurrency with no regulatory disclosures.

capital-turn.comScanned 3h ago
0
Trust score
DANGEROUS
Heuristics 0·MT 8
Category tags
investment scamphishing#Investment Scam#Phishing#Fake Shop95% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
3/91
Engines flagged this URL
Domain Age
Registration date unknown
MT Intelligence
Dangerous
Critical likelihood · 95% confidence
DANGEROUS

Fake shop — do not order

The site shows patterns common to non-delivery scam shops. Don't submit payment details, and if you already paid by card or PayPal, start a chargeback today.

Website Preview

Screenshot of capital-turn.com
LIVE RENDER
capital-turn.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

78
/ 100
Critical visual risk

Visual red flags detected in the screenshot

The page exhibits multiple visual hallmarks of a high-yield investment program (HYIP) scam site: fast-money promises in the hero, inflated member/investment statistics, a 'PLAN' section implying tiered returns, and absence of any regulatory disclosure. These patterns collectively indicate a high-risk fraudulent investment platform.

Visual risk78/100

What our vision model saw

6 signals

Hero headline 'Invest for Future in Stable Platform and Make Fast Money' uses classic high-yield investment program (HYIP) language promising fast money returns

Inflated vanity statistics displayed prominently — '13.3M Average Investment' and '100000 Total Visitors' — typical of HYIP sites to manufacture credibility

Cookie consent modal overlay covering page content, a common pattern on low-trust investment sites to distract from lack of regulatory disclosures

Live chat widget ('Chat') in bottom-right corner is a common fake-support fixture on HYIP/scam investment platforms

Site branding 'Capital-Turn Investment' with navigation items including 'PLAN' and 'GATEWAY' matches the structural template of known HYIP clone sites

No visible regulatory body logos, license numbers, or verifiable compliance disclosures despite soliciting investment

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Critical scam likelihoodengineMT · Guardiantrust8/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The site exhibits textbook HYIP fraud patterns: a hero headline promising 'Fast Money' returns, inflated vanity statistics (860,000 members, 13.3M average investment), tiered investment plans with guaranteed daily profits of 10–30%, and zero regulatory or compliance information. The domain was registered only 13 days ago via a registrar frequently associated with phishing campaigns. Kaspersky flags it as phishing, and independent security researchers classify it as credential-theft infrastructure with a 1/100 trust score. The hosting IP has an abuse score of 83/100 with 48 documented abuse reports. No legitimate business registration, licenses, or public reviews exist. The cookie consent modal and fake live-chat widget are common distraction tactics on fraudulent investment platforms.
Full dossier
Analysis complete

Page Content

The site presents as 'Capital-Turn Investment Company' with a hero section promising fast money through stable investment. It displays fabricated statistics: 860,000 total members, 13.3M average investment, and 100,000 total visitors. Investment plans promise daily returns of 10–30% with language like 'Your profits are always guaranteed.' A cookie consent modal obscures regulatory disclosures, and a fake live-chat widget occupies the bottom-right corner — both common on HYIP scam sites.

Infrastructure

Hosted on IP 163.61.188.9 with an abuse score of 83/100 and 48 documented abuse reports. SSL certificate is valid (Let's Encrypt R12) but does not confer legitimacy on a fraudulent site. The domain uses a registrar (TuringSign Inc. d/b/a Cosmotown) frequently associated with phishing campaigns.

Domain History

Registered May 27, 2026 — only 13 days old at the time of analysis. WHOIS data is unavailable, a common obfuscation tactic. No legitimate business registration, licenses, or compliance records exist in any jurisdiction.

Web Reputation

Kaspersky classifies it as phishing. Independent security researchers assign a 1/100 trust score citing young age, 4 blacklist detections, and absence of legitimate user reviews. No positive mentions on Reddit, an independent review aggregator, or other consumer-review platforms. The site accepts cryptocurrency (BNB, USDT TRC20) and displays fake deposit/withdrawal logs to simulate legitimacy.

Risk Factors
7
  • Domain registered only 13 days ago via a registrar with a history of phishing-domain abuse.
  • Kaspersky flags the site as phishing; independent researchers assign a 1/100 trust score.
  • Hosting IP has an abuse score of 83/100 with 48 documented abuse reports.
  • Promises unrealistic guaranteed daily returns of 10–30%, a hallmark of HYIP fraud.
  • Displays fabricated statistics (860,000 members, 13.3M average investment) to manufacture false credibility.
  • No regulatory disclosures, business registration, or compliance information despite soliciting investment.
  • Cookie consent modal and fake live-chat widget are common distraction tactics on fraudulent investment platforms.
Positive Signals
1
  • SSL certificate is valid and issued by Let's Encrypt.
AI Recommendation
Do not enter any personal, financial, or payment information on this site. Do not send cryptocurrency or any funds. Report the domain to your browser's abuse-reporting system and to the hosting provider.
Scam network detected
Related infrastructure identified

The hosting IP (163.61.188.9) has 48 documented abuse reports and an abuse score of 83/100, indicating it is part of a broader abuse infrastructure. The registrar Cosmotown is known for facilitating phishing campaigns.

Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for capital-turn.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
2 scam reports · 1 complaint
Key findings
7 headline facts from open-web research
  • Domain registered May 27, 2026 (13 days old as of early June 2026 analysis), via registrar TuringSign Inc. d/b.a. Cosmotown
  • Gridinsoft classifies capital-turn.com as Phishing with 1/100 trust score due to young age, 4 blacklist detections, and no review history
  • Site at capital-turn.com (and capital-turn.com variant) presents as Capital-Turn Investment Company offering investment plans with daily returns of 10-30% (e.g. "10% daily for 2 times", "Your profits are always guaranteed")
  • Displays fake statistics: 860,000 Total Members, 13.3M Average Investment, 100,000 Total Visitors; accepts crypto (BNB, USDT TRC20) and lists deposit/withdrawal logs
  • Typical HYIP-style template with unrealistic guaranteed daily profits, no regulatory information, and credential-theft behavioral indicators noted by scanner
  • Cosmotown registrar frequently associated with phishing domain reports and has dedicated abuse reporting processes
  • No mentions on Reddit, Trustpilot, or other review platforms; no legitimate business records located
Scam reports (2)
Direct quotes from public scam databases, forums, and news.
  • Gridinsoftopen

    "We flagged Capital-turn.com as phishing. The page behavior matches a common credential-theft flow: impersonation first, urgency second, data request last."

  • Gridinsoftopen

    "Phishing This site is classified as Phishing based on multiple risk signals, including 4 blacklist detections, a very young domain (13 days), and no established public user-review history."

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Security researchers at Gridinsoft classified capital-turn.com as phishing and flagged it for multiple risk signals: a very young domain (13 days old), 4 blacklist detections, and no established public user-review history. The site's behavior matches a common credential-theft flow: impersonation first, urgency second, data request last. No positive reviews, legitimate business registrations, or mentions on consumer-review platforms (Reddit, an independent review aggregator) were found. The registrar (TuringSign Inc. d/b/a Cosmotown) is frequently associated with phishing-domain abuse.

Antivirus Engines

Detection matrix · live
3 engines flagged this URL

We cross-check every URL against our antivirus network of 91 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious2Suspicious55Harmless91Engines
0
of 91
Kaspersky
Malicious· phishing
alphaMountain.ai
Suspicious· spam
Fortinet
Suspicious· spam

3 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · R12
ExpiresAug 25, 2026 (76d)
Self-signedNo
Hosting & Technology
HostingLeads Globe
Server locationUS

Server Reputation

Abuse Intelligence
Confidence score83%
Reports on file48
ISPLeads Globe
Usage typeData Center/Web Hosting/Transit

Scam-Type Likelihood

1 scam-type patterns detected
Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Fake Shop
Fake Shop
Low-level signals
25/100
  • AI analyst tagged this as a fake shop.
  • No phone number or postal address anywhere on the page.

Fake shop — do not order

Signals common to non-delivery scam shops were detected on this site.

  • Do not interact with capital-turn.com

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • If you already paid by card or PayPal — start a chargeback

    Contact your bank or card issuer and dispute the charge as "goods not received" or "merchant fraud." PayPal users can open a case in the Resolution Centre. Act within 120 days for card chargebacks in most jurisdictions.

  • Save every piece of evidence

    Screenshots of the checkout, order confirmation emails, any chat transcripts, and the product listing page. Chargeback and fraud reports go faster when you have receipts.

  • Report the shop

    Report to the FTC (reportfraud.ftc.gov), Action Fraud UK, or your local consumer-protection body. Post the URL on the MalwareTips scam forum so other buyers can find it.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
ListedCheck ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review flags capital-turn.com as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
  • No — capital-turn.com scored 5/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
  • Yes. capital-turn.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · R12, expiring in 76 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • 3 out of 91 antivirus engines in our malware network flagged capital-turn.com as malicious or suspicious (1 outright malicious). Even one detection is a meaningful signal.
  • No. capital-turn.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • capital-turn.com resolves to an IP operated by Leads Globe in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 9, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around capital-turn.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·capital-turn.com
DANGEROUS

Capital-Turn Investment is a high-yield investment program (HYIP) scam site promising unrealistic daily returns of 10–30% with no regulatory oversight. The domain is only 13 days old, displays fabricated member statistics, and has been flagged as phishing by multiple security researchers.

Do not enter any personal, financial, or payment information on this site. Do not send cryptocurrency or any funds. Report the domain to your browser's abuse-reporting system and to the hosting provider.

AV engines
91
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.