Suspicious

Phishings targeting USPS

Suspicious and active websites

Phishings targeting Usps

Suspicious and active websites

Active
17
New (7d)
5
Trend (7d)
↓55%
Website
usps.com
About
AIUS parcel-delivery scam pattern. SMS-launched 'undelivered package' lure is the most common entry vector.
Hosts
Google LLC (10) · Cloudflare, Inc. (6) · Microsoft Corporation (1)
Countries
United StatesUnited States (16) · PolandPoland (1)
TLS certs
Let's Encrypt (9) · Google Trust Services (2)

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-07-26 07:30 2026-07-22 01:06
https://usps.us-tcpyj.life
Screenshot of usps.us-tcpyj.life PhishTank Details
2026-07-26 07:30 2026-07-22 01:03
https://usps.us-wyanf.life
Screenshot of usps.us-wyanf.life PhishTank Details
2026-07-26 07:30 2026-07-22 01:02
https://usps.us-cvteo.life
Screenshot of usps.us-cvteo.life PhishTank Details
2026-07-26 07:30 2026-07-22 01:02
https://usps.us-uaqdt.life
Screenshot of usps.us-uaqdt.life PhishTank Details
2026-07-26 07:30 2026-07-20 12:34
https://uspssmartpackagelockers.com
Screenshot of uspssmartpackagelockers.com urlscan Details
2026-07-26 07:30 2026-07-17 22:47
https://en.usps.cash
Screenshot of en.usps.cash urlscan Details
2026-07-26 07:30 2026-07-17 13:59
https://bn.usps.cash
Screenshot of bn.usps.cash urlscan Details
2026-07-26 07:30 2026-07-17 13:50
https://es.usps.cash
Screenshot of es.usps.cash urlscan Details
2026-07-26 07:30 2026-07-17 02:04
https://ar.usps.cash
Screenshot of ar.usps.cash urlscan Details
2026-07-26 07:30 2026-07-17 01:26
https://he.usps.cash
Screenshot of he.usps.cash urlscan Details
2026-07-26 07:30 2026-07-17 01:26
https://zh.usps.cash
Screenshot of zh.usps.cash urlscan Details
2026-07-26 07:30 2026-07-17 01:25
https://fr.usps.cash
Screenshot of fr.usps.cash urlscan Details
2026-07-26 07:30 2026-07-17 01:25
https://nl.usps.cash
Screenshot of nl.usps.cash urlscan Details
2026-07-26 07:30 2026-07-17 01:25
https://de.usps.cash
Screenshot of de.usps.cash urlscan Details
2026-07-26 07:30 2026-07-16 21:05
https://id.usps.cash
Screenshot of id.usps.cash urlscan Details
2026-07-26 07:30 2026-07-12 15:41
https://usps-pickup.com
Screenshot of usps-pickup.com GSB Details
2026-07-26 07:30 2026-07-04 01:01
http://uspsaunitedworkforce.com
Screenshot of uspsaunitedworkforce.com OpenPhish Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://usps.us-tcpyj.life
PhishTank 		Screenshot of usps.us-tcpyj.life Details
https://usps.us-wyanf.life
PhishTank 		Screenshot of usps.us-wyanf.life Details
https://usps.us-cvteo.life
PhishTank 		Screenshot of usps.us-cvteo.life Details
https://usps.us-uaqdt.life
PhishTank 		Screenshot of usps.us-uaqdt.life Details
https://uspssmartpackagelocke…
urlscan 		Screenshot of uspssmartpackagelockers.com Details
https://en.usps.cash
urlscan 		Screenshot of en.usps.cash Details
https://bn.usps.cash
urlscan 		Screenshot of bn.usps.cash Details
https://es.usps.cash
urlscan 		Screenshot of es.usps.cash Details
https://ar.usps.cash
urlscan 		Screenshot of ar.usps.cash Details
https://he.usps.cash
urlscan 		Screenshot of he.usps.cash Details
https://zh.usps.cash
urlscan 		Screenshot of zh.usps.cash Details
https://fr.usps.cash
urlscan 		Screenshot of fr.usps.cash Details
https://nl.usps.cash
urlscan 		Screenshot of nl.usps.cash Details
https://de.usps.cash
urlscan 		Screenshot of de.usps.cash Details
https://id.usps.cash
urlscan 		Screenshot of id.usps.cash Details
https://usps-pickup.com
GSB 		Screenshot of usps-pickup.com Details
http://uspsaunitedworkforce.c…
OpenPhish 		Screenshot of uspsaunitedworkforce.com Details

AIHow to verify a real USPS URL

  • Legitimate USPS URLs always end in usps.com (e.g. www.usps.com, account.usps.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not USPS.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open usps.com from your browser bookmark or type the domain manually.
  • Real USPS pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.