capricourier[.]org

The domain capricourier.org has been identified as a phishing site involved in brand impersonation of 'across', with a focus on cryptocurrency-related scams. The site is currently taken offline, but while active it posed an elevated risk to users by attempting to deceive visitors through fraudulent representation of the 'across' brand. Individuals searching for information on whether capricourier.org is safe or a scam should be aware of its classification as a phishing domain.

Technical analysis shows that capricourier.org was registered through Cosmotown, Inc. on April 16, 2025. It resolved to the IP address 163.61.188.2, located in the US (AS153568 NEW DHAKA HARDWARE), and used a Let's Encrypt / R13 SSL certificate. The site was detected by 1 of 95 security vendors on VirusTotal, including Gridinsoft, and appears on one security blocklist (PhishDestroy). The site utilized technologies such as Bootstrap, LiteSpeed, GSAP, Swiper, jQuery, and HTTP/3. The page title observed was 'Home | Page', and the domain's Gridinsoft trust score was 0/100. Google Safe Browsing did not flag the domain at the time of analysis.

Anyone who interacted with capricourier.org, particularly for cryptocurrency transactions, should immediately revoke any token approvals and transfer digital assets to a new secure wallet. Users who may have entered sensitive information should change passwords associated with affected accounts, enable two-factor authentication, and monitor for unauthorized activity. Suspected phishing or impersonation attempts involving capricourier.org can be reported to relevant security authorities or anti-phishing organizations for further investigation.