usaddressverification[.]online

This domain, usaddressverification.online, operates as a fraudulent USPS address verification portal designed to harvest personally identifiable information (PII) from victims. The site mimics official postal service branding, presenting a seemingly legitimate interface under the title 'Free USPS Address Verification.' Analysis indicates the campaign targets individuals expecting mail or package deliveries, exploiting trust in the USPS brand to solicit sensitive details such as full names, physical addresses, phone numbers, and potentially financial information under the guise of address validation. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification. The domain was registered on August 25, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3 and is flagged by 16 out of 95 security vendors on VirusTotal, including detection as generic phishing. The domain appears on one security blocklist and has been assigned a trust score of 1/100 by Scamadviser and 0/100 by Gridinsoft. Technologies detected include Tailwind CSS for styling, Netlify for hosting, and Cloudflare for content delivery and DDoS protection, with HTTP/3 and HSTS implemented, likely to evade basic detection mechanisms and enhance perceived legitimacy. Users who visited usaddressverification.online should assume their submitted information has been compromised. Immediate actions include monitoring financial accounts for unauthorized activity, placing fraud alerts with credit bureaus, and changing passwords for any accounts where credentials may have been reused. If payment details were entered, contacting financial institutions to block transactions and request card replacements is advised. The domain has been taken offline, but related campaigns may emerge using similar naming conventions or infrastructure. Vigilance against unsolicited communications requesting personal or financial details remains critical.