j/k, of course
The problem is that USPS is an easy mass attack target since nearly 100% of people get mail.
If you want to phish people, you need to cast a wide net, and this one is the widest possible one.
None of this appears on www.usps.com. www.usps.gov redirects to www.usps.com. Bare usps.gov does not (goes nowhere)
I wonder how much the phishing would decrease if the USPS website was served on usps.gov with the "an official website" and "how you know" seen on other official US gov't sites.
And for that matter, why does www.usps.gov redirect to the .com rather than vice-versa, and why does the bare usps.gov domain resolve to nothing? Who makes these decisions and how do they result in the opposite of what I (perhaps naively) would expect rational decision-makers to do?
But to really stop this, USPS would need o buy all possible domains that start with USPS.*
That can get very expensive that to ICAN. Plus the USPS has no $ due to what Bush II put in place when he was president and the GOP refusing to undoing that change. I believe that was done to bust the union.
Also not possible because: subdomains
Actual report: https://akamai.com/blog/security-research/phishing-usps-mali...
Some more discussion: https://news.ycombinator.com/item?id=40194346
So for me, on average, 99% of mail goes right from USPS to the trash - in fact, I would probably pay a few dollars a month for a service which would automatically trash that 99% of mail for me.
That has me asking - what is the point of USPS these days? Is it just packages?
