accesspostal[.]com

The domain accesspostal.com was registered on February 23, 2026 through Cosmotown, Inc. and is currently taken offline. Infrastructure analysis shows the domain resolves to the IP address 163.61.188.5, which is assigned to AS153568 NEW DHAKA HARDWARE and geolocated in the United States. DNS resolution is provided by four authoritative name servers – dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting.com – indicating use of a commercial hosting provider. The site was served over HTTPS with a Let’s Encrypt R12 certificate, a common choice for short‑lived malicious sites. Web‑technology fingerprints include Bootstrap, LiteSpeed, Smartsupp, jQuery UI, jQuery, FancyBox, Popper, and HTTP/3, all of which are typical of low‑cost or rapidly assembled phishing pages.

Reputation signals are uniformly negative. Gridinsoft assigns a trust score of 0 out of 100, effectively marking the domain as malicious. VirusTotal recorded a single positive detection out of 93 scanning engines, confirming at least one vendor identified malicious activity. The domain appears on three independent security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a phishing vector. The page title returned by the server – “Access Postal Delivery | Homepage” – suggests an attempt to impersonate a postal service, though no further content analysis is available.

Uncertainty remains around the exact phishing campaign details, such as the specific credential collection page or targeted user base, because the site is offline and no page capture is provided. Defenders should continue to block the domain at network perimeter and endpoint layers, monitor DNS queries for the listed name servers, and add the IP address 163.61.188.5 to any deny lists. Given the low trust score and multiple blocklist entries, the domain should be treated as high‑confidence malicious.