Security Report: uspsfund.online - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0113efc6-6003-4c7f-96ce-b2af7e4e9fee Domain and IP registration (RDAP)/api/v1/rdap/0113efc6-6003-4c7f-96ce-b2af7e4e9feeHow often this domain was scanned/api/v1/domain/stats/uspsfund.online Scan history for this domain/api/v1/domain/history/uspsfund.online?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is uspsfund.online and was registered 1 week ago.

Submitted URL: http://uspsfund.online

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Phishing page impersonating USPS on a 1-day-old domain, harvesting card details for a fake $1.95 redelivery fee and exfiltrating them via an embedded Telegram bot; flagged by Safe Browsing.

Risk Factors (7)

Brand impersonation of USPS on a non-official domain

Newly registered domain (1 day old) hosting a payment-collection page

Payment/card-detail capture form (card number, expiry, CVV fields present in page markup) on a brand-impersonating host

Telegram bot token in page script enabling exfiltration of submitted data

Google Safe Browsing Social Engineering threat

Urgency/fraud-prevention pretext ('VERIFICATION REQUIRED', 'do not navigate away')

Fabricated USPS HQ address and 'encrypted session' trust badges

Domain age information unavailable

Details

Page Title

Payment Verification — USPS

Scan Type

public

Domain Name Analysis

Within the modern generic top-level domain (.online), 'uspsfund.online' is registered. The core label 'uspsfund' covers 8 characters split between two vowels and six consonants. Word splitting yields 2 words: usps, fund. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

UNITED STATES POSTAL SERVICE SECURE PAYMENT PORTAL Ref: PKG-2026- 88472 Session: 8X9K2M VERIFICATION REQUIRED: Your redelivery fee of $1.95 is pending. To complete the scheduling of your held parc...

Page Load Overview

0.44s

Total Load Time

6 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,440 chars

Detector Agreement:67%

Website Classification

Primary Category

real estate property58% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

real estate property

58%

finance banking

54%

government public service

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	173.211.81.11	Buffalo, New York, United States	AS396356Latitude.sh
2	1	-	-

Detected Technologies1

LiteSpeed

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CA627F5A76F24824A49B58EC2B7706163AB4D303D502C498BE9C43F80F5EDACD6B379C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:BrSIGTyiKuQNBdMZBopK3OZsf74BcnYr5Zjp19S/+ben2cEkeBEiJbCO8WlDwEFJ:BrSI26YDYMDGobjOFbiSGip

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15583:RaJoVBBnGxTgAFCAhBdDgVLg2CgDiBUAEBkoEAgIFgBIOgBdAETEoAGlJuwQIADETogcDsAEEKpEoapkyDAggIiABAghhADg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:08000c1c1c1c3c3c

Perceptual Hash:9973267dcc889966

Difference Hash:1a4a5a3232323331

Wavelet Hash:0c2c3c3c3c3c3d3d

Color Hash:N/A

Other Hashes

Crop Resistant:1a4a5a3232323331

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: uspsfund.online