# uspsexpress.com — MALICIOUS

> uspsexpress.com is linked to high-risk delivery scams. Stay vigilant and avoid interacting with this offline fraud domain.

## Summary
PhishDestroy identifies uspsexpress.com as a high-risk delivery scam domain designed to deceive users with fraudulent shipping notifications and requests. Classified under delivery scams, it attempts to exploit trust in postal services by mimicking legitimate courier communication.

Technical intelligence reveals uspsexpress.com was flagged by 15 out of 95 security vendors and appeared in 13 AlienVault OTX threat pulses. The domain was created on February 21, 2026, and registered via a dead domain provider. It also features on two notable security blocklists, reinforcing its malicious nature.

Currently, uspsexpress.com has been taken offline to prevent further victimization. PhishDestroy advises users and organizations to remain cautious of similar scam sites impersonating delivery services and encourages verifying sender legitimacy before clicking links or providing personal data.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Target brand: USPS
- Page title: Track Your Package - USPSExpress

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 49.12.128.176
- SSL Issuer: R12

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Seclookup", "SOCRadar", "Sophos", "VIPRE"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a5cb6-9337-719b-8fe5-dd434a1af31c.png
- PhishDestroy: https://phishdestroy.io/domain/uspsexpress.com/
- LLM endpoint: https://phishdestroy.io/domain/uspsexpress.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/uspsexpress.com/
Last updated: 2026-03-19