Security Scan Report: uspss.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 73 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://uspss.pages.dev/entreg/LoginAction_input%252CN/A%252Chttps%253A/topjobs/index.html

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Cloned USPS.com homepage served on the deceptive free-host domain uspss.pages.dev, with a single-source phishing report; clear impersonation of the postal service on a non-official domain. No credential fields captured, but do not enter data.

Risk Factors (5)
Brand impersonation of USPS (United States Postal Service) on a non-official domain
Deceptive hostname mimicking the impersonated brand
Single-source (unverified) phishing threat-intel match on the primary domain
Unranked domain on a shared hosting platform with unknown page creation date
Obfuscated, nonsensical URL path inconsistent with the cloned content
Domain age information unavailable

Details

Page Title

Welcome | USPS

Scan Type

public

Domain Name Analysis

Domain 'uspss.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'uspss'. Its registrable label 'pages' stretches across 5 characters with two vowels and 3 consonants. Breaking it apart gives 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://uspss.pages.dev/entreg/LoginAction_input%252CN/A%252Chttps%253A/topjobs/index.html

Page Load Overview

3.80s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,126 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service82% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
82%
education learning
80%
e-commerce shopping
66%
documentation technical
46%
corporate
35%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19172.66.44.116Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18172.66.47.140Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18104.16.40.28Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18104.16.41.28Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
734--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18A83E742A5C91D1B1123239AF8613734999FC933D72E1881BABF46992FE6D402C5F73E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Khg8DaUXY/p8Eq7E5E/EE6USCbi7zLl6ty5zyjT7/jIonSAiBrnfl:ug89YB8f7G876HCcLl6ty5Widnt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82482:TY2pSgPOaQAgAKYFUEkEBgCxQbBXUjqwKAKG6LfkpYMCnCypXWCOAFBTwIGBINQQhAI1yICEgJJSc5QllZOCYBBIGiiQCAUA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3e3f3f3f3f7f7f3f
Perceptual Hash:810004147dfcff7f
Difference Hash:e0c0c0c0c0c0c0c0
Wavelet Hash:1e3e3e3e32323232
Color Hash:#92e06c

Other Hashes

Crop Resistant:e0c0c0c0c0c0c0c0

Scan History

Scan history not available

Unable to load historical scan data