USPS

Postal & parcel United Statesusps.comRank 14 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
1
1 on phishing hosts
Registered lookalikes
240
15 listed by a source or an address list
Official domains
5
verified from USPS's own sites and records

Certificate findings for USPS

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to USPS's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 5 findings, grouped by hostname

  1. usps-delivery-tracking.wasmer.app DE · AS213230 · HETZNER-CLOUD2-AS Hetzner O…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    usps-delivery-tracking.wasmer.app
    First seen
    2026-10-29 20:16 UTC
    First published
    2026-10-29 20:34 UTC
    DNS
    Resolves · checked 2026-11-04 20:44 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.161.23.223.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.161.23.223
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 19:16 UTC to 2027-01-27 19:16 UTC
    Logged 2026-10-29 20:14 UTC in Geomys Tuscolo2027h1, entry 398,869,073
    SHA-256 13657712ffb7e0e2e6f41fed2d04b8d7ad716dc16c6b90bba9bc5c2ebbc756f8
    Public key SHA-256 95a4ca5b9c765cdd24e222f711344649b58eb0c33e3445ae2b1b68f7f6a6a2ca
    Brand
    USPS
    Addresses
    5.161.23.223 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH

    Suggest a correction

  2. uspspostal.com NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 17 y ago
    DetailsHide
    Hostname
    uspspostal.com
    First seen
    2026-10-28 03:16 UTC
    DNS
    Not resolving since 2026-11-02 · checked 2026-11-05 09:01 UTC
    Checks
    Overdue since 2026-11-02 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 212.7.194.53.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 212.7.194.53
    Certificate
    Issued by YR2
    Valid 2026-10-28 02:14 UTC to 2027-01-26 02:14 UTC
    Logged 2026-10-28 03:12 UTC in Google PlumbersArms2027h1, entry 482,511,742
    SHA-256 8376804998b76f0ee4cf7cf55fd40fe3967a007b6a7801bfb6e3f8fceeb24e34
    Public key SHA-256 337a946bfef7c98b1c71d67f80a9750ef87f4bf860a58ee6441c3c46b701a8f9
    Brand
    USPS
    Addresses
    212.7.194.53 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    Domain
    uspspostal.com
    Registered
    2009-10-31 · Media Elite Holdings Limited, S.A.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  3. www.usps-delivery-information-always.duckdns.org US · AS44382 · WhiteLabel Fiba Cloud Opera…
    Spamhaus DROPAddress listed by Spamhaus DROP
    DetailsHide
    Hostname
    www.usps-delivery-information-always.duckdns.org
    First seen
    2026-10-27 15:58 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 216.9.226.171.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 216.9.226.171
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-27 14:54 UTC to 2027-01-25 14:54 UTC
    Logged 2026-10-27 15:52 UTC in Google ParcelYard2027h1, entry 473,722,558
    SHA-256 03ff33c5c664c08a5bb0d27a43ca09caf386427cbaed516cbf49dc6e09fb4b65
    Public key SHA-256 cd947469189dd7f2a46666dd40db4a60ae6f1bb7c035ea9a6eac255d9305f0de
    Brand
    USPS
    Addresses
    216.9.226.171 · United States · AS44382 WhiteLabel Fiba Cloud Operation Company, LLC

    Suggest a correction

  4. webmail.usps-delivery-information-always.duckdns.org US · AS44382 · WhiteLabel Fiba Cloud Opera…
    Spamhaus DROPAddress listed by Spamhaus DROP
    DetailsHide
    Hostname
    webmail.usps-delivery-information-always.duckdns.org
    First seen
    2026-10-27 15:58 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 216.9.226.171.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 216.9.226.171
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-27 14:54 UTC to 2027-01-25 14:54 UTC
    Logged 2026-10-27 15:52 UTC in Google ParcelYard2027h1, entry 473,722,558
    SHA-256 03ff33c5c664c08a5bb0d27a43ca09caf386427cbaed516cbf49dc6e09fb4b65
    Public key SHA-256 cd947469189dd7f2a46666dd40db4a60ae6f1bb7c035ea9a6eac255d9305f0de
    Brand
    USPS
    Addresses
    216.9.226.171 · United States · AS44382 WhiteLabel Fiba Cloud Operation Company, LLC

    Suggest a correction

  5. usps-delivery-information-always.duckdns.org US · AS44382 · WhiteLabel Fiba Cloud Opera…
    Spamhaus DROPAddress listed by Spamhaus DROP
    DetailsHide
    Hostname
    usps-delivery-information-always.duckdns.org
    First seen
    2026-10-27 15:58 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 216.9.226.171.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 216.9.226.171
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-27 14:54 UTC to 2027-01-25 14:54 UTC
    Logged 2026-10-27 15:52 UTC in Google ParcelYard2027h1, entry 473,722,558
    SHA-256 03ff33c5c664c08a5bb0d27a43ca09caf386427cbaed516cbf49dc6e09fb4b65
    Public key SHA-256 cd947469189dd7f2a46666dd40db4a60ae6f1bb7c035ea9a6eac255d9305f0de
    Brand
    USPS
    Addresses
    216.9.226.171 · United States · AS44382 WhiteLabel Fiba Cloud Operation Company, LLC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches USPS when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Postal & parcel

All brands →