usstampoutlet[.]com

Analysis of the domain usstampoutlet.com, observed on July 23, 2026, indicates an elevated‑risk Google brand‑impersonation operation that has been taken offline. The domain was registered on October 09, 2025 through NameSilo, LLC and resolves to the IP address 104.18.8.146, which belongs to AS13335 Cloudflare, Inc. in the United States. DNS resolution is served by ns1.dnsowl.com, ns2.dnsowl.com and ns3.dnsowl.com. No TLS certificate was presented, confirming that the site operated without HTTPS. Gridinsoft assigned a trust score of 0 out of 100, reflecting a lack of legitimacy.

VirusTotal scanned the domain and 14 of 95 security vendors returned a malicious classification, demonstrating consensus among detection engines. The domain appears on one external blocklist and has been cited in fourteen AlienVault OTX threat‑intel pulses, reinforcing its presence in shared intelligence feeds. PhishDestroy has actively blocked the domain, and the current status is offline, indicating that the malicious site is no longer reachable. The only visible content captured before takedown is the page title “stamps sale forever stamps authorized factory stores,” which bears no obvious connection to Google and suggests a content mismatch often used to mask malicious intent. Because the site lacked an SSL certificate, any credentials entered would have been transmitted in clear text, increasing exposure risk.

The combination of a low trust score, multiple vendor detections, blocklist inclusion, and OTX references provides strong evidence that the domain was employed for brand impersonation, likely to harvest Google‑related credentials or to redirect victims to further malicious infrastructure. Uncertainty remains regarding the exact phishing kit or the specific lure presented to victims, as no screenshots or HTML analysis have been released. Defenders should continue to monitor the IP address 104.18.8.