uspspayment.org
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of uspspayment.org
The domain uspspayment.org appears to present itself as a payment portal related to the United States Postal Service. Based on the page title, meta description, and screenshot, the site is designed to resemble an official USPS-branded parcel payment page, showing shipment details, tracking information, and a request to complete a payment before package release.
The content suggests the site is intended to collect payment and possibly personal or contact information from visitors who believe they are resolving a delivery issue. The domain itself is not the primary official USPS domain, and the branding shown on the page may indicate an attempt to imitate a well-known postal service identity rather than operate as an independent informational website.
Safety Assessment for uspspayment.org
Multiple risk indicators were present at the time of this scan. The domain was flagged by 15 out of 92 security engines, with many of those detections classifying it as phishing or otherwise malicious. In addition, the page visually resembles USPS branding and uses a domain name that closely suggests an official postal payment service, which may indicate a look-alike website intended to appear trustworthy to visitors.
Other context also raises concern. The domain is very new at 116 days old, has no established traffic ranking, and appears to focus on collecting payment for a supposed package issue. While the malware scan did not identify flagged files and major threat databases listed in the scan were clean at that moment, those signals do not outweigh the stronger phishing-related detections and the apparent brand imitation shown in the page content.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was using a valid Let's Encrypt SSL certificate at the time of the scan, which means traffic may be encrypted in transit, but HTTPS alone does not indicate legitimacy. The domain is hosted on AWS EC2 infrastructure in the United States and appears to sit behind Cloudflare-related web infrastructure. The server IP was 34.214.61.222, and the web server was identified as cloudflare.
From a domain-security perspective, DNSSEC was not enabled, and the domain was recently registered through Name.com. The combination of a newly created domain, USPS-themed branding, and phishing-related detections across multiple security engines may be considered a notable technical and reputational concern.
Share your experience with this website. Was it safe? Did you encounter any issues?