The Package That Never Shipped: Following a USPS Smishing Kit Through Censys DNS Data

A sophisticated smishing campaign impersonating USPS and UPS uses hundreds of rapidly rotating lookalike domains, real-time card data exfiltration, and genuine brand assets—revealed through Censys DNS history to be a single operator’s infrastructure that cosmetic changes and IP churn cannot hide.