Is curasupps.com safe?
http://curasupps.com/
Checked on
How we checked
Coverage: strong · 5 of 6 applicable core capabilities
- Antivirus (58 of 93 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Supplement shop Cura draws repeated third-party warnings and a complaint pattern of charges without delivery
curasupps.com is a Shopify storefront selling mushroom-blend capsules and gummies under the brand 'Cura', with a paid 'Cura+' membership alongside one-off orders. Nothing malicious was found on the technical side, but independent assessments are consistently negative: a very low trust score, a 'suspicious shop' classification, and a published complaint pattern of being charged without receiving the product or receiving something different and of much lower quality. Combined with a membership funnel and refund terms that leave the seller wide discretion, the site sits at Moderate Risk.
Saved site captureCaptured safely during this scan1 antivirus engine flagged this URLGridinsoftSaved antivirus result from Nov 1, 2026At a glance
Saved with this scan; each value is explained in the sections below.
Domain age
1.1 years old
Registered Sep 1, 2025Expires Sep 1, 2027Certificate
Valid
Expires Dec 29, 2026 (47d)Hosting
Canada (CA)
Shopify, Inc.Popularity
Not in the Cloudflare Radar top list
Antivirus
1/58
1 antivirus engine flagged this URLSafe Browsing
Not flagged
Not flagged on major threat listsCommunity
No reviews yet
Checked
Nov 12, 2026
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 52/100
Moderate Risk covers scores 45–69. 6 findings pulled the score down; 4 pushed it up.
- Start55
- -1
- -1
- -1
- Score52
What pulled the score down
- Moderate3 independent sources carry complaints or warnings about this site, including: "curasupps.com has a very low trust score."-1 pts
- Moderate3 independent sources carry complaints or warnings about this site, including: "Este sitio está clasificado como Tienda sospechosa en función de múltiples señales de riesgo, incluidas 1 detecciones en listas negras y una baja calificación…"-1 pts
- Moderate3 independent sources carry complaints or warnings about this site, including: "Uebsajti Curasupps.com ngre alarmin dhe këshillohet të qëndroni larg blerjeve online."-1 pts
- ModerateThe navigation advertises a 'Cura+' membership and a membership cancellation page, indicating a recurring paid component.
- ModerateReturns require a pre-approved RMA and the money-back guarantee covers only verified manufacturing defects, refunded at the seller's discretion.
- Moderate1 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
What pushed the score up
- SupportsThe browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection.
- SupportsThe site lists a support mailbox on its own domain, a phone number and a postal address.
- SupportsCart, add-to-cart and checkout all stay on curasupps.com; the only off-site links are legal links to the captcha vendor.
- SupportsThe domain is about 1 year 2 months old, not a freshly registered throwaway.
Points come from the saved evidence ledger: it lowered the score from 55 to 52 and split those 3 points between the findings that show points; the others carry no points in the ledger.
01 · Investigation Brief
Investigation Brief
curasupps.com is a Shopify storefront selling mushroom-blend capsules and gummies under the brand 'Cura', with a paid 'Cura+' membership alongside one-off orders. Nothing malicious was found on the technical side, but independent assessments are consistently negative: a very low trust score, a 'suspicious shop' classification, and a published complaint pattern of being charged without receiving the product or receiving something different and of much lower quality. Combined with a membership funnel and refund terms that leave the seller wide discretion, the site sits at Moderate Risk.
Independent checks describe a suspicious shop, not a clean one
An independent site-rating service gives the domain a very low trust score and separately notes that the site is actively working to prevent credit card chargebacks and runs an internal review system rather than an independent one. Gridinsoft classifies it as a suspicious shop based on multiple risk signals, including a blacklist detection and a low rating across a small number of reviews, and another review site advises staying away from purchases here.
The most concrete adverse item is a stated complaint pattern: typical complaints are being charged without delivery, or receiving a different product of much lower quality. That is a customer-harm description rather than a technical detection, and it is the main reason this store is not rated as a low-risk shop.
Ownership is not visible: the domain was registered on 1 September 2025 through NameCheap and the registrant details are not publicly available, and one assessment describes the owner as hiding their identity behind a paid WHOIS service. The site itself names 'Cura LLC' with a support mailbox on its own domain, a US phone number and a postal address, which is better than a bare shell but does not verify who is behind it.
Clean connection, but the commercial terms carry the risk
The browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection, so there is no sign of phishing, malware or a hijacked checkout. One saved antivirus result marks the URL as suspicious while the rest of the engines are clean; that result is stale, so it is treated as a caution rather than a current detection.
The risk sits in how the shop sells. The navigation includes a 'Cura+' membership and a 'Membership Cancellation' entry, so a recurring paid membership runs alongside ordinary product sales, and the exact price, renewal and cancellation mechanics are not spelled out on the pages reviewed.
Returns require a pre-approved RMA and items sent back without one are refused, while the money-back guarantee covers only verified manufacturing defects and refunds for those are issued at the seller's discretion. Refunds that are approved are processed within 1–2 business days after the return is verified, with 3–7 business days for the bank to post it. The terms also include a binding arbitration clause with a 30-day informal-resolution step and a 30-day opt-out window, and the seller reserves the right to change the terms by posting updates.
Why the score is 52
02 · Security Evidence
Security evidence
Antivirus Engines
1/ 93
detectionsSaved analysis from November 1, 2026 - stale
1 engine flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 1
- Total
- 93
- Suspicious1
- Clean57
- Undetected35
| Engine | Finding |
|---|---|
| GridinsoftSuspicious | suspicious |
All 93 engine results
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Unrated
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- BitDefendermisc
- Forcepoint ThreatSeekershopping
- Googlehealthcare
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Visual context from the captured page
A centered modal titled 'AGE VERIFICATION' asks 'Are you 18 or older?' with 'We'll only ask once.' and two buttons: 'Yes, I'm 18 or older' and 'No, I'm under 18'. Header shows a dotted-circle 'cura' wordmark centered, with 'Menu' at left and 'Cart: 0' at right. Hero background shows a hand holding a green capsule/pill against a dark green backdrop, with partially obscured headline text ending in 'ent' and 'tions' and body copy about 'solutions that align with your goals'.
What the captured page showed
3 observations- 01
A centered modal titled 'AGE VERIFICATION' asks 'Are you 18 or older?' with 'We'll only ask once.' and two buttons: 'Yes, I'm 18 or older' and 'No, I'm under 18'.
- 02
Header shows a dotted-circle 'cura' wordmark centered, with 'Menu' at left and 'Cart: 0' at right.
- 03
Hero background shows a hand holding a green capsule/pill against a dark green backdrop, with partially obscured headline text ending in 'ent' and 'tions' and body copy about 'solutions that align with your goals'.
Browser behavior
What our isolated browser recorded while it loaded the page. Host names only: no full addresses are published.
- Pop-ups
- 0
- Download attempts
- 0
- Notification prompts
- 0
- Navigations
- 1
- Other hosts contacted
- 15
Where the page went
- First loadcurasupps.comSame site
Hosts on our aggressive-advertising list
None contacted.
Test clicks
No test click was made on this page.
What the page says about itself
Quoted from the pages we read: the site's own words, not our findings.
- Page title
Cura
Pages we read
- Main page/Read
- Terms/policies/terms-of-serviceRead
- Refund / returns policy/policies/refund-policyRead
- Shipping policy/policies/shipping-policyRead
- Contact page/pages/contactRead
03 · Investigation Story
Investigation story
What the site claims
Cura
What we observed
The page content was captured and checked alongside 58 antivirus results.
What independent research found
8 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Supplement
Observed behavior
Evidence behind this classification
If this is a scam — what it means for you
What happens when you order
A visitor lands on an age-verification gate, adds a product such as the '10 Mushroom Blend' at $18.00 to the cart and checks out on the same domain, with free 3–5 day delivery advertised. The purchase path stays on curasupps.com; the only off-site links are legal links to the captcha vendor, so there is no cross-domain checkout or affiliate redirect to worry about.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
Once paid, the published complaint pattern is that buyers are charged without receiving the product, or receive a different item of much lower quality. Getting money back then runs through an RMA request that must be approved first, and the guarantee only covers manufacturing defects at the seller's discretion.
Do not order supplements or sign up for the Cura+ membership here until you can verify the operator independently. If you have already paid, keep the order confirmation and contact your card issuer promptly rather than relying on the RMA process, and if you joined the membership, cancel in writing and keep the confirmation.
Web research findings
Independent findings for curasupps.com, including public complaints, named review sources, registration records, and look-alike-domain evidence.
- ScamAdviseropen
"curasupps.com has a very low trust score."
- ScamAdviseropen
"This site is actively preventing credit card chargebacks"
- ScamAdviseropen
"An internal review system has been identified"
- Gridinsoft (Spanish edition)open
"Este sitio está clasificado como Tienda sospechosa en función de múltiples señales de riesgo, incluidas 1 detecciones en listas negras y una baja calificación de 2.4/5 en 3 reseñas."
- Gridinsoft (Spanish edition)open
"Las quejas típicas son cobro sin entrega, producto distinto o calidad muy inferior."
- Malware Removal Guide (malware.guide)open
"Uebsajti Curasupps.com ngre alarmin dhe këshillohet të qëndroni larg blerjeve online."
- ScamAdviseropen
"The website's owner is hiding his identity on WHOIS using a paid service"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.
Infrastructure map
- Domaincurasupps.com
- Redirects tocurasupps.com
- Hosted byShopify, Inc.
- Referencesajax.googleapis.com · fonts.shopifycdn.comand 9 more
Domain Timeline
- Sep 1, 2025Domain registered
First appeared in WHOIS records — 1.1 years old when this review was saved.
- Nov 12, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- Contact email on the site's own domain (support@curasupps.com).
- Phone number listed (+1 (229) 629-1252).
- Postal address visible on the page.
Domain & Encryption
At the scan on Nov 12, 2026: 60% of the registration period had passed
At the scan on Nov 12, 2026: 48% of the validity period had passed
Certificate issued for curasupps.com.
A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Chat, reviews and email
- Klaviyo
- Judge.me reviews
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://curasupps.com/
- 2200https://curasupps.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Grouped by what each domain is for. in page: named in the page’s HTML. contacted: the browser loaded it while rendering the page. ad list: on our aggressive-advertising list.
Advertising1
- amplify.outbrain.comcontacted
Analytics & tracking3
- connect.facebook.netcontacted
- googletagmanager.comcontacted
- static-tracking.klaviyo.comcontacted
Payments1
- shop.appcontacted
CDN & fonts8
- ajax.googleapis.comin pagecontacted
- assets1.adroll.comcontacted
- cdn.jsdelivr.netcontacted
- cdn.shopify.comin pagecontacted
- fonts.shopifycdn.comin page
- monorail-edge.shopifysvc.comin page
- otlp-http-production.shopifysvc.comcontacted
- static.newsbreak.comin pagecontacted
Chat & reviews5
- api.judge.mein page
- cdn.judge.mein page
- cdn1.judge.mein page
- judge.mein page
- static.klaviyo.comin pagecontacted
Other / unknown3
- id-msp.newsbreak.comcontacted
- io.ecommcheckout.comin pagecontacted
- visitors.nospyapp.comcontacted
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 1 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Nov 1, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 12, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Nov 12, 2026 |
| Visual evidence | 3 visible observations saved with the page capture | Completed | No adverse finding | this scan · Nov 12, 2026 |
| Independent research | 8 independent findings were saved | Completed | Adverse | this scan · Nov 12, 2026 |
- Antivirus
- Result1 of 93 engines flagged
- CompletionLimitedFindingAdverse
- Freshnessstale fallback · analysed Nov 1, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 12, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 12, 2026
- Visual evidence
- Result3 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 12, 2026
- Independent research
- Result8 independent findings were saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Nov 12, 2026
07 · Safety FAQ
Safety FAQ
Answered from the saved verdict and evidence in this report.
Is curasupps.com a scam or is it safe?
Is curasupps.com safe to use?
Has curasupps.com been flagged by antivirus engines?
Is curasupps.com on any phishing or malware blacklists?
How old is the curasupps.com domain?
Does curasupps.com have a valid SSL certificate?
Where is curasupps.com hosted?
How often is the curasupps.com report updated?
08 · Final Verdict
Final verdict
Supplement shop Cura draws repeated third-party warnings and a complaint pattern of charges without delivery
curasupps.com is a Shopify storefront selling mushroom-blend capsules and gummies under the brand 'Cura', with a paid 'Cura+' membership alongside one-off orders. Nothing malicious was found on the technical side, but independent assessments are consistently negative: a very low trust score, a 'suspicious shop' classification, and a published complaint pattern of being charged without receiving the product or receiving something different and of much lower quality. Combined with a membership funnel and refund terms that leave the seller wide discretion, the site sits at Moderate Risk.
09 · Community
Community
Are you the owner of curasupps.com?Verify and reply