phishunt.io flags newly registered uspsfund.online as USPS phishing site
phishunt.io flagged newly registered uspsfund.online as a USPS phishing site. The domain is also on the Phishing Army blocklist.
- First reported
- Reports
- 1
Source: x.com · published
What happened
On 5 November 2026 the phishing tracker phishunt.io posted on X a USPS phishing site at uspsfund.online. It reported that the domain was registered on 4 November 2026, one day earlier, resolves to 173.211.81.11 (Latitude sh, AS396356, United States), and carries an Ultahost hosting tag. The domain also appears on the Phishing Army community blocklist. It is not a USPS domain.
How the scam works
USPS-themed phishing commonly arrives as a text or email claiming a package could not be delivered, that a small fee is due, or that an address needs confirming. The link leads to a lookalike page that asks for personal details and often card numbers to pay a supposed postage or customs fee. USPS does not send texts asking for payment or card details via links of this kind.
Details entered on such pages can be used for card fraud and identity theft. The brand name inside a newly registered .online domain is a common trick. Anyone who entered card or personal details should contact their card issuer, monitor accounts, and report the message. Track real packages only through the official USPS app or usps.com typed into the browser. The domain and technical details come from the phishunt.io post and the blocklist listing, and have not been independently checked by scammers.com beyond those sources.
Brand-in-domain tricks work because uspsfund.online looks related to postage at a glance. Registration one day before the alert is typical of disposable phishing infrastructure. If a delivery text creates urgency about a small fee, that urgency is the point of the scam: it short-circuits the habit of opening the official USPS tools instead.
Source
Post by @phishunt_io on X, 5 November 2026, flagging uspsfund.online. Not independently verified by scammers.com.
Red flags
- A USPS-themed site on a newly registered domain such as uspsfund.online.
- Texts claiming a package fee or customs charge is due via a link.
- Requests for card details to release a delivery.
- A domain that is not usps.com.
- Pressure to pay a small fee within hours.
If you were targeted
- 1Do not tap package links in texts; open the USPS app or type usps.com yourself.
- 2USPS does not ask for card details through random delivery links.
- 3If you entered card details, contact your card issuer at once.
- 4Report the message to USPS and to the FBI's IC3 where appropriate.
- 5Delete the message without replying.