Is flujocapital-es.com safe?
http://flujocapital-es.com/
Coveragepartial2 of 4 applicable core capabilities
Flujo Capital is flagged as a live crypto drainer impersonating an AI trading platform
flujocapital-es.com presents itself as an official AI-powered trading platform, but independent threat intelligence says the domain is a live crypto drainer that impersonates a legitimate investment brand to trick visitors into connecting wallets and approving malicious token contracts. Eleven independent antivirus families also returned adverse results for the domain, and the site itself could not be loaded during review, so its own pages, contact details and policies were never seen. The domain is only about five months old, which fits the short-lived infrastructure typical of drainer campaigns. Clean TLS and a clean Safe Browsing result only mean no warning was recorded at check time; they do not offset the drainer identification.
Be the first to review flujocapital-es.com
Lost money to flujocapital-es.com? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
flujocapital-es.com presents itself as an official AI-powered trading platform, but independent threat intelligence says the domain is a live crypto drainer that impersonates a legitimate investment brand to trick visitors into connecting wallets and approving malicious token contracts. Eleven independent antivirus families also returned adverse results for the domain, and the site itself could not be loaded during review, so its own pages, contact details and policies were never seen. The domain is only about five months old, which fits the short-lived infrastructure typical of drainer campaigns. Clean TLS and a clean Safe Browsing result only mean no warning was recorded at check time; they do not offset the drainer identification.
What the evidence says the site actually does
Threat intelligence reports that flujocapital-es.com is a live crypto drainer aimed at cryptocurrency users. According to that report, the domain masquerades as Flujocapital, a legitimate investment platform, to deceive victims into connecting their wallets and approving malicious token contracts that silently drain funds. That is a wallet-approval drainer, not a genuine trading service.
The antivirus aggregate is consistent with that finding: eleven independent antivirus families reported an adverse result for this domain, with BitDefender, Emsisoft and Forcepoint ThreatSeeker among the detections. The detection record is saved rather than freshly submitted, so the exact timing should be treated with some caution, but the adverse signal itself is real.
The site's own branding reinforces the impersonation angle: a search record shows the page title "Flujo Capital | Plataforma oficial de trading con inteligencia artificial", i.e. it markets itself as an official AI trading platform. That is the cover story for the drainer behaviour described above.
Technical checks versus operator risk
The technical layer looks superficially clean: the saved TLS check found a valid encrypted connection, and the browser threat feed returned no threat warning. Those results mean no detection was recorded at check time; they do not establish that the operator is trustworthy, and they are outweighed here by the drainer identification and the antivirus flags.
The operator side is where the risk sits. The registrable domain is only 162 days old, a short lifespan consistent with disposable drainer infrastructure, and the site could not be read during review because it returned an HTTP 522 error. Its own page, contact, About and policy text was therefore never reviewed, so there is no verifiable operator identity, address or policy behind the trading-platform claim.
A separate visual observation recorded a connection timeout for flujocapital-es.com, matching the unreadable-page finding. The site may be temporarily down or deliberately rotated, but either way nothing on the operator side can be verified as legitimate.
Why the score is 12
11 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
17/ 93
detectionsSaved analysis from October 17, 2026 - stale
17 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 13
- Suspicious
- 4
- Total
- 93
| Engine | Finding |
|---|---|
| BitDefenderMalicious | phishing |
| EmsisoftMalicious | malware |
| Forcepoint ThreatSeekerMalicious | phishing |
| FortinetMalicious | malware |
| G-DataMalicious | phishing |
| KasperskyMalicious | phishing |
| LionicMalicious | phishing |
| RisingMalicious | phishing |
| SeclookupMalicious | malicious |
| SOCRadarMalicious | phishing |
| SophosMalicious | phishing |
| VIPREMalicious | malware |
| WebrootMalicious | malicious |
| alphaMountain.aiSuspicious | suspicious |
| DNS8Suspicious | suspicious |
| ESETSuspicious | suspicious |
| GridinsoftSuspicious | suspicious |
All 93 engine results
- BitDefender - phishing - Malicious
- Emsisoft - malware - Malicious
- Forcepoint ThreatSeeker - phishing - Malicious
- Fortinet - malware - Malicious
- G-Data - phishing - Malicious
- Kaspersky - phishing - Malicious
- Lionic - phishing - Malicious
- Rising - phishing - Malicious
- Seclookup - Malicious
- SOCRadar - phishing - Malicious
- Sophos - phishing - Malicious
- VIPRE - malware - Malicious
- Webroot - Malicious
- alphaMountain.ai - Suspicious
- DNS8 - Suspicious
- ESET - Suspicious
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Clean
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- Dr.Web - Clean
- EmergingThreats - Clean
- Ermes - Unrated
- ESTsecurity - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- LevelBlue - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Snort IP sample list - Unrated
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- ViriBack - Clean
- VX Vault - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Connection timed out
What the captured page showed
1 observation- 01
Connection timed out
03 · Investigation Story
Investigation story
What the site claims
No page claim could be verified for flujocapital-es.com because no usable page content or saved capture was available.
What we observed
The page itself could not be fully inspected, so the report relies on the other saved checks.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
2 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What this means for you
What happens to a visitor who follows the pitch
A visitor arriving at this domain is shown an official-looking AI trading platform and is led toward connecting a cryptocurrency wallet. According to the threat report, that connection is the trap: the site asks the visitor to approve malicious token contracts, and those approvals let the operator silently drain funds from the wallet.
How the observed mechanism works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
Because the drainer works through wallet approvals rather than a visible checkout, the loss can occur without any obvious payment step, and the site's current unavailability does not make the domain safe to revisit later.
Do not visit flujocapital-es.com, and never connect a cryptocurrency wallet to it or approve any token contract it requests. If you already connected a wallet, revoke the approvals through a trusted wallet or approval-revocation tool and move remaining funds to a fresh wallet. Treat any "AI trading platform" pitch on this domain as a drainer lure, regardless of whether the page loads.
Web research findings
Independent findings for flujocapital-es.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- PhishDestroyopen
"PhishDestroy has flagged flujocapital-es.com as a live crypto drainer targeting unsuspecting cryptocurrency users. The domain masquerades as Flujocapital, a legitimate investment platform, to deceive victims into connecting their wallets and approving malicious token contracts that silently drain funds."
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainflujocapital-es.com
- Redirects toflujocapital-es.com
- Hosted byCloudflare, Inc.
Domain Timeline
- May 13, 2026Domain registered
First appeared in WHOIS records — 5 months old when this review was saved.
- Oct 22, 2026Saved security review — Rated Dangerous
The completed checks from this saved scan are detailed above.
flujocapital-es.com was registered very recently when this review was saved and was already flagged. Freshly-registered domains are disproportionately used for scams, and a young domain with active threat signals warrants extra caution.
Domain & Encryption
Server Reputation
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentpartial
- Analysiscomplete
- Visual evidencepartial
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
11 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
unknownComplaints, withdrawals, business conduct and commercial traps.
No confirmed evidence in this dimension.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 17 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 17, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 22, 2026 |
| Page content | Page content was not available for semantic review | Limited | No saved finding | this scan · Oct 22, 2026 |
| Visual evidence | The site blocked our capture or showed an error page; 1 visible observation saved | Limited | No saved finding | this scan · Oct 22, 2026 |
| Independent research | 2 independent findings were saved | Completed | Adverse | this scan · Oct 22, 2026 |
- Antivirus
- Result17 of 93 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 17, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
- Page content
- ResultPage content was not available for semantic review
- CompletionLimited
- FindingNo saved finding
- Freshnessthis scan · Oct 22, 2026
- Visual evidence
- ResultThe site blocked our capture or showed an error page; 1 visible observation saved
- CompletionLimited
- FindingNo saved finding
- Freshnessthis scan · Oct 22, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 22, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is flujocapital-es.com a scam or a legit website?
Is flujocapital-es.com safe to use?
What should I do if I already gave my details to flujocapital-es.com?
Can I get my money back from flujocapital-es.com?
Is my device at risk after visiting flujocapital-es.com?
How do I report flujocapital-es.com?
Why does flujocapital-es.com look legitimate if it's a scam?
Has flujocapital-es.com been flagged by antivirus engines?
Is flujocapital-es.com on any phishing or malware blacklists?
How old is the flujocapital-es.com domain?
Where is flujocapital-es.com hosted?
How often is the flujocapital-es.com report updated?
08 · Final Verdict
Final verdict
Flujo Capital is flagged as a live crypto drainer impersonating an AI trading platform
flujocapital-es.com presents itself as an official AI-powered trading platform, but independent threat intelligence says the domain is a live crypto drainer that impersonates a legitimate investment brand to trick visitors into connecting wallets and approving malicious token contracts. Eleven independent antivirus families also returned adverse results for the domain, and the site itself could not be loaded during review, so its own pages, contact details and policies were never seen. The domain is only about five months old, which fits the short-lived infrastructure typical of drainer campaigns. Clean TLS and a clean Safe Browsing result only mean no warning was recorded at check time; they do not offset the drainer identification.
09 · Community