amcoureirexpress[.]com

The domain amcoureirexpress.com was registered on February 21, 2026 and is currently listed as offline. Evidence indicates that the site was used to impersonate the brand "across" in a crypto‑related scam, as reflected in the supplied brand target and scam type fields. The site presented the page title "American Courier Express | Fast & Reliable Delivery Services Nationwide," a phrasing that does not directly reference the targeted brand but aligns with the delivery‑service narrative often employed in fraudulent campaigns. Technical analysis shows the domain resolves to the IP address 163.61.188.2, which is hosted within the United States under autonomous system AS153568, identified as NEW DHAKA HARDWARE.

The SSL certificate used is labeled R13, but no further certificate details such as issuance date or issuer are provided. Reputation scoring from Gridinsoft assigns the domain a trust score of 0 out of 100, indicating a complete lack of confidence in its legitimacy. The domain appears on a single security blocklist and has been specifically blocked by PhishDestroy, confirming that at least one anti‑phishing service has taken action against it.

VirusTotal analysis reports that 2 of 93 scanned security vendors flagged the domain, reinforcing the suspicion of malicious intent. While the site is no longer reachable, the combination of a recent registration date, low trust score, blocklist presence, and vendor detections suggests an elevated risk profile. Defenders should continue to monitor the associated IP address 163.61.188.2 for any resurgence of activity, enforce outbound filtering for connections to this address, and incorporate the domain into internal threat‑intel feeds to prevent future credential or crypto‑asset compromise attempts.