Security Scan Report: www-deliverthewin-wpe-stage.usps.mrm-client.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 1 country across 11 domains to perform 48 HTTP transactions. The main domain is mrm-client.com and was registered 11 years ago.

Submitted URL: https://www-deliverthewin-wpe-stage.usps.mrm-client.com/research-center/political-planning-tool/#/question/1

AI Security Verdict

Low Risk

Confidence: 65%

2
Risk Score

Staging subdomain of an 11-year-old agency domain presenting a USPS campaign-mail quiz; no forms, no credential or payment capture, no Indicators of Compromise or malware. Low risk, but it is a non-production vendor URL — avoid entering any data.

Risk Factors (2)
USPS branding and 'Deliver The Win' content served on a third-party agency domain rather than usps.com, and the URL is a staging environment not intended for public users
Domain (mrm-client.com) is unranked in Cisco Umbrella top 1M
Safety Factors (5)
Established 4153-day-old domain with minimal age risk
Zero forms, zero password or payment fields anywhere on the page
No Indicators of Compromise, YARA, IDS or Safe Browsing findings
Third-party scripts all from reputable, high-ranked providers
Page type is article/informational; USPS is referenced as the campaign owner, not claimed as another entity's login
Domain age information unavailable

Details

Page Title

Campaign Mail Planner - USPS Deliver The Win

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www-deliverthewin-wpe-stage.usps.mrm-client.com' is registered with subdomain 'www-deliverthewin-wpe-stage.usps'. The core label 'mrm-client' covers 10 characters holding two vowels versus 7 consonants, notching 1 hyphen. Word splitting yields 3 words: mr, m, client. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www-deliverthewin-wpe-stage.usps.mrm-client.com/research-center/political-planning-tool/#/question/1

Page Load Overview

2.32s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,343 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service58% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
58%
e-commerce shopping
53%
technology software
50%
documentation technical
46%
news media journalism
36%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14141.193.213.20Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
213.217.248.208Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
2192.178.183.97Google · CDNUnited States
AS15169Google LLC
254.85.25.79Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
2142.251.156.4Google · CDNUnited States
AS15169Google LLC
2104.17.209.240Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
220.140.151.75San Antonio, Texas, United States
AS8070Microsoft Corporation
2141.193.213.21Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
23.228.30.171Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
234.227.198.87Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
4818--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C0E31B33F15C247E626FD6D9B162D31F21268943D4072568B6FD90EC8BCAD610CAB78B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:K42i/qzSlcaTWjI4fdYjqS4IzgZvEtfDd5OeM4S:G5iQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:148888:KBAAgCJ3GKDWRo0/eE4E21RgCho2kEKtgCSBBAQAsUAjHBBAABgECEBrLGkAtsCKASkgEmpPoFAgACLF7ijAoJEeTyGMCT6J

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffffffbf00
Perceptual Hash:fdf568cf488c488c
Difference Hash:168c12060a2b6289
Wavelet Hash:90e7c7fbffe80000
Color Hash:#d22d51

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data