usps.xupqfhz.one
Categorie: Phishing
Om het product met alle functies te gebruiken, moet u een licentie voor Combo Cleaner aanschaffen. Beperkte gratis proefperiode van zeven dagen beschikbaar. Combo Cleaner is eigendom van en wordt beheerd door RCS LT, het moederbedrijf van PCRisk.com.
Beschrijving van usps.xupqfhz.one
The domain usps.xupqfhz.one appears to be a newly created web address using the well-known USPS brand name within a subdomain rather than an official postal-service domain. Based on the domain structure, classification data, and similarity findings, it does not appear to represent a legitimate standalone business or public service website. The visible page at the time of the scan showed only a minimal "Not Found" response rather than a functioning service portal.
Available indicators suggest this domain may have been set up to imitate or reference the United States Postal Service brand in some way, potentially for credential harvesting or other deceptive activity. The underlying registered domain, xupqfhz.one, does not resemble official USPS web properties, and the site had no meaningful public-facing content during the scan.
Veiligheidsbeoordeling voor usps.xupqfhz.one
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 11 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. In addition, the domain closely resembles usps.com in plain language and may be a look-alike intended to exploit trust in the USPS name, which is a common pattern in deceptive campaigns.
Other contextual factors also increase concern: the domain was only 2 days old, had no Tranco ranking, and the screenshot showed only a sparse error-style page rather than a credible service website. While one malware scan reported no malicious files and some blacklist sources were clean at the time of checking, those signals do not outweigh the broader phishing-related detections and the strong resemblance to a major brand.
Based on these findings, this website may pose potential risks to visitors.
Technische beschrijving
The site was using a valid Let's Encrypt SSL certificate at the time of the scan, hosted on IP address 43.157.158.108 with a GoFrame HTTP Server banner. Hosting data pointed to Aceville infrastructure, and the reported geolocation was São Paulo, Brazil. A valid certificate only indicates encrypted transport and should not be treated as proof of legitimacy.
The domain was extremely new, registered on 2026-05-19, with DNSSEC not enabled and nameservers set to share-dns.net/share-dns.com. The combination of very recent registration, unsigned DNS, lack of visible site content, and brand-resembling naming pattern may be consistent with short-lived phishing infrastructure.
Deel uw ervaring met deze website. Was deze veilig? Bent u problemen tegengekomen?