informeddelivery[.]prioritymailsllc[.]com

This domain, informeddelivery.prioritymailsllc.com, is identified as a high-risk phishing resource specializing in brand impersonation. Analysis confirms it mimics the United States Postal Service (USPS) Informed Delivery service, a platform for mail and package notifications. The page title, 'Informed Delivery - Mail & Package Notifications | USPS,' directly replicates the legitimate USPS interface, suggesting an intent to deceive users into submitting sensitive credentials or personal information. No evidence of a drainer kit was observed, but the domain’s design and structure align with credential harvesting tactics commonly employed in phishing campaigns targeting postal services. Technical indicators reveal critical infrastructure details. The domain resolves to IP address 92.113.23.104, hosted on AS47583 (Hostinger International Limited) in Lithuania. It was registered on November 19, 2025, through HOSTINGER operations, UAB, a registrar frequently associated with malicious domains. VirusTotal detection metrics show 24 out of 95 security vendors flagging the domain as malicious, while Google Safe Browsing explicitly classifies it as phishing. The domain appears on one security blocklist and is actively blocked by at least one threat intelligence platform. Notably, the absence of an SSL certificate further undermines its legitimacy, as modern phishing domains typically employ encryption to evade detection. As of the latest assessment, informeddelivery.prioritymailsllc.com has been taken offline, likely due to enforcement actions by hosting providers or registrars. However, residual risk persists, particularly if the threat actors retain control of the infrastructure or pivot to newly registered domains. Organizations and users are advised to monitor for similar impersonation attempts, particularly those leveraging postal service branding. Network-level protections should be updated to include the observed IP (92.113.23.104) and registrar patterns in blocklists. End-users should verify the authenticity of USPS-related communications by accessing the official site directly and avoiding links from unsolicited messages.