uspstrackingsafe[.]top

uspstrackingsafe.top has been identified by PhishDestroy as an active delivery scam posing as a USPS tracking portal. The domain is weaponized to deceive users into downloading malware under the guise of package tracking updates. This represents an elevated risk due to its active infrastructure and deceptive branding targeting logistics-related user trust. This domain was registered through Global Domain Group LLC on April 15, 2026, and resolves to IP 163.61.188.5. On VirusTotal, 4 out of 95 security vendors flagged the domain for malicious behavior, while it utilizes a Let's Encrypt SSL certificate to appear legitimate. The recent domain creation and low vendor detection rate suggest a campaign in early deployment, increasing the likelihood of successful user compromise. Users must avoid interacting with uspstrackingsafe.top entirely. Do not click any links or download files from this domain. If accessed accidentally, clear browser cache and cookies immediately. Network administrators should block the domain at the firewall level and monitor for outbound connections to 163.61.188.5. Report this domain to your email provider and cybersecurity team to prevent further distribution. This is a delivery scam—verify tracking numbers only through official USPS (usps.com) or trusted carrier portals.