Is postage-usps.com safe?
http://postage-usps.com/
Coveragestrong4 of 6 applicable core capabilities
postage-usps.com is a 52-day-old domain impersonating USPS to sell discounted postage stamps, and was flagged by 10 antivirus families.
The site operates as a shop selling discounted postage stamps while mimicking the branding of the United States Postal Service. Saved antivirus analysis shows 10 independent vendor families reporting an adverse result, and the vision review confirms the page presents itself with USPS-style wording like 'US STAMPS' and 'Forever Stamps at Clearance Prices.' The registrable domain is only 52 days old, and the contact details were not reviewed because the page is script-rendered. A valid TLS certificate and the absence of a Safe Browsing warning do not offset the impersonation and detection evidence.
Be the first to review postage-usps.com
Lost money to postage-usps.com? Warn others
Did you buy from postage-usps.com?
Loading saved screenshot
Preparing the saved page preview.
Follow postage-usps.com
Get a notification in your MalwareTips bell when new reviews arrive (one digest a day at most), when the verdict changes after a rescan, and when MalwareTips or the verified site owner replies. Unfollow any time.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
The site operates as a shop selling discounted postage stamps while mimicking the branding of the United States Postal Service. Saved antivirus analysis shows 10 independent vendor families reporting an adverse result, and the vision review confirms the page presents itself with USPS-style wording like 'US STAMPS' and 'Forever Stamps at Clearance Prices.' The registrable domain is only 52 days old, and the contact details were not reviewed because the page is script-rendered. A valid TLS certificate and the absence of a Safe Browsing warning do not offset the impersonation and detection evidence.
USPS Impersonation and Deceptive Pricing
The vision review of the page shows USPS-style branding and wording, including 'US STAMPS,' 'FOREVER STAMPS,' and 'USPS' references, alongside the domain postage-usps.com. This match is consistent with brand impersonation of the official United States Postal Service.
The page advertises 'Forever Stamps at Clearance Prices,' a pricing claim that is inconsistent with the fixed retail pricing of genuine USPS Forever stamps and functions as a deceptive lure.
Security Vendor Detections and Infrastructure Signals
Saved antivirus analysis shows that 10 independent antivirus families returned an adverse result for this site, identifying it as phishing or fraud on the vendor side. This is a stale saved observation rather than a fresh submission, so it confirms historical flagging but the exact timing should be verified.
The registrable domain is only 52 days old, and WHOIS research records a creation date of 2026-09-03, which is unusual for a store that presents itself as a legitimate source of official USPS postage. A valid encrypted connection and the absence of a browser threat feed warning were observed, but these only show that the connection is encrypted and that Google has not flagged the site; they do not establish operator legitimacy.
Unclear Operator and Contact Details
The site's page builds its content with scripts, so its own contact details were not visible to the page reader and were not reviewed. No operator identity, registration ID, or off-domain email was disclosed in the reviewed evidence, which leaves the responsible party unverified.
Why the score is 30
10 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
12/ 93
detectionsSaved analysis from October 8, 2026 - stale
12 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 11
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| alphaMountain.aiMalicious | phishing |
| BitDefenderMalicious | phishing |
| CRDFMalicious | malicious |
| CyRadarMalicious | phishing |
| Forcepoint ThreatSeekerMalicious | phishing |
| G-DataMalicious | phishing |
| KasperskyMalicious | phishing |
| LionicMalicious | phishing |
| NetcraftMalicious | malicious |
| SophosMalicious | malware |
| WebrootMalicious | malicious |
| FortinetSuspicious | spam |
All 93 engine results
- alphaMountain.ai - phishing - Malicious
- BitDefender - phishing - Malicious
- CRDF - Malicious
- CyRadar - phishing - Malicious
- Forcepoint ThreatSeeker - phishing - Malicious
- G-Data - phishing - Malicious
- Kaspersky - phishing - Malicious
- Lionic - phishing - Malicious
- Netcraft - Malicious
- Sophos - malware - Malicious
- Webroot - Malicious
- Fortinet - spam - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- LevelBlue - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual warning signs were identified
US STAMPS FOREVER STAMPS Forever Stamps at Clearance Prices
What the captured page showed
2 observations- 01
US STAMPS FOREVER STAMPS
- 02
Forever Stamps at Clearance Prices
03 · Investigation Story
Investigation story
What the site claims
The captured page appears to offer a shop service.
What we observed
The page content was captured and checked alongside 60 antivirus results.
What independent research found
1 external finding was saved and compared with the page evidence.
What remains unverified
2 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Phishing & Impersonation
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 0110 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- 02The registrable domain is only 52 days old, with a recorded creation date of 2026-09-03.
- 03The page uses USPS-style wording such as 'US STAMPS' and 'FOREVER STAMPS' and the domain postage-usps.com, consistent with brand impersonation.
Web research findings
Independent findings for postage-usps.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- MaskGraphopen
"Creation Date: 2026-09-03T13:06:18Z"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainpostage-usps.com
- Redirects topostage-usps.com
- Hosted byCloudflare, Inc.
- Referencescdn.jsdelivr.net · fonts.gstatic.com
Domain Timeline
- Sep 3, 2026Domain registered
First appeared in WHOIS records — 52 days old when this review was saved.
- Oct 26, 2026Saved security review — Rated High Risk
The completed checks from this saved scan are detailed above.
postage-usps.com was registered very recently when this review was saved and was already flagged. Freshly-registered domains are disproportionately used for scams, and a young domain with active threat signals warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
Domain & Encryption
Redirect Chain
- 1301http://postage-usps.com/
- 2200https://postage-usps.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentpartial
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
10 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. · The page uses USPS-style wording such as 'US STAMPS' and 'FOREVER STAMPS' and the domain postage-usps.com, consistent with brand impersonation.
Operator / customer risk
unknownComplaints, withdrawals, business conduct and commercial traps.
The registrable domain is only 52 days old, with a recorded creation date of 2026-09-03.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 12 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 8, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 26, 2026 |
| Page content | Page fetched · HTTP 200 | Limited | No saved finding | this scan · Oct 26, 2026 |
| Visual evidence | 2 visible observations saved with the page capture | Completed | Adverse | this scan · Oct 26, 2026 |
| Independent research | 1 independent finding was saved | Completed | No adverse finding | this scan · Oct 26, 2026 |
- Antivirus
- Result12 of 93 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 8, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 26, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionLimited
- FindingNo saved finding
- Freshnessthis scan · Oct 26, 2026
- Visual evidence
- Result2 visible observations saved with the page capture
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 26, 2026
- Independent research
- Result1 independent finding was saved
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 26, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is postage-usps.com a scam or a legit website?
Is postage-usps.com safe to use?
What should I do if I already gave my details to postage-usps.com?
Can I get my money back from postage-usps.com?
Did postage-usps.com steal my password or personal information?
How do I report postage-usps.com?
Why does postage-usps.com look legitimate if it's a scam?
Has postage-usps.com been flagged by antivirus engines?
Is postage-usps.com on any phishing or malware blacklists?
How old is the postage-usps.com domain?
Does postage-usps.com have a valid SSL certificate?
How often is the postage-usps.com report updated?
08 · Final Verdict
Final verdict
postage-usps.com is a 52-day-old domain impersonating USPS to sell discounted postage stamps, and was flagged by 10 antivirus families.
The site operates as a shop selling discounted postage stamps while mimicking the branding of the United States Postal Service. Saved antivirus analysis shows 10 independent vendor families reporting an adverse result, and the vision review confirms the page presents itself with USPS-style wording like 'US STAMPS' and 'Forever Stamps at Clearance Prices.' The registrable domain is only 52 days old, and the contact details were not reviewed because the page is script-rendered. A valid TLS certificate and the absence of a Safe Browsing warning do not offset the impersonation and detection evidence.
09 · Community
Community
Are you the owner of postage-usps.com?Verify and reply