postage-usps.com
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of postage-usps.com
postage-usps.com appears to be an e-commerce website offering discounted postage products, particularly Forever Stamps and stamp rolls. Based on the page title, metadata, and homepage imagery, the site presents itself as an online stamp shop focused on below-retail USPS-related postage items, with marketing claims around clearance pricing, free shipping, secure payment, and returns.
The branding and domain naming suggest the site is attempting to associate itself with USPS or USPS-style postal products, although the domain is not the official usps.com domain. The homepage shown in the scan includes product-category navigation, promotional banners, and sales-oriented language typical of a small online retail storefront. Based on available registration data, the domain appears to be recently registered through a commercial registrar and uses Cloudflare-backed infrastructure.
Safety Assessment for postage-usps.com
This domain shows several notable risk indicators at the time of this scan. It was flagged by 12 security engines, with multiple detections describing the site as phishing or otherwise malicious. In addition, the domain closely resembles the official USPS domain and may be a look-alike intended to benefit from user confusion. The site also appears to sell USPS-related products while using branding and wording that could imply an affiliation with the postal service.
Other contextual signals add to the concern. The domain is very new, has no established traffic ranking in the provided data, and promotes discounted postage stamps at clearance-style prices, which can be a pattern seen on deceptive storefronts. Although several blacklist and threat-database checks did not report active listings at the time of this scan, and the malware scan did not identify confirmed malicious files, the generic link-level detections and the broader multi-engine phishing consensus weigh more heavily here.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served through Cloudflare infrastructure, with the resolved server IP associated with Cloudflare and hosting geolocated in Toronto, Canada. It presented a valid SSL/TLS certificate issued by Google Trust Services, which indicates encrypted browser connections were available at the time of testing. The domain uses Cloudflare nameservers and its DNSSEC status appears to be unsigned.
From a security posture perspective, the presence of HTTPS is a basic positive signal but does not by itself establish legitimacy. The domain is only 52 days old, which is a meaningful risk factor for trust assessment, and the scan data shows multiple generic detections on internal asset URLs. The combination of recent registration, unsigned DNSSEC, and strong phishing-related reputation signals suggests elevated caution is warranted.
Share your experience with this website. Was it safe? Did you encounter any issues?