If you stumbled across cibc-uspssecure.ph while looking for CIBC banking or USPS tracking, stop right there. This domain combines two well-known brand names in a way legitimate companies never do — real banks use their own domains, not mashups. The site's SSL certificate is invalid, which means any login or personal data you type is sent in plain text and can be intercepted. It also blocks search engines from seeing its pages, a move that legitimate financial institutions don't need to make because they have nothing to hide. There's no record of this site in the Wayback Machine, so it's either brand new or built to disappear quickly. cibc-uspssecure.ph reviews don't exist because no one can leave them — the site actively discourages scrutiny. If you need to access your CIBC account or check a USPS package, go directly to their real websites. This domain is not a safe place for any personal information.
No — cibc-uspssecure.ph doesn't look safe
In plain English
This site is not safe to use. It impersonates two major trusted names (CIBC and USPS) but has an invalid SSL certificate, blocks search engines, and hides its ownership. Any information you enter would be exposed to whoever controls the server. Avoid it completely.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The SSL certificate is invalid, meaning any data you send (including passwords) is unencrypted and visible to attackers. This is a critical failure for any site that asks for logins or payment info.
The domain name itself is a red flag — it mashes together two well-known brands (CIBC and USPS) in a way that legitimate businesses never do. Ownership is completely hidden because the .ph TLD doesn't expose WHOIS data, so there's no way to verify who runs this site.
The site has no history in the Wayback Machine and isn't in any major rankings. While it avoids DNS blacklists for now, the complete lack of a web presence is unusual for any established business — especially one pretending to be a bank.
The site does have an About page, contact info, and legal pages, but these are likely fictional. The fact that it blocks all search engine crawlers with robots.txt is a strong signal that it doesn't want to be scrutinized — legitimate financial sites welcome indexing.
Privacy policy and terms of service are present, which is a plus on the surface. But for a site impersonating a financial institution, more robust compliance measures (like a real registered address and data protection notices) would be expected. These pages may just be copied from elsewhere.
The site runs on a basic cloud server in Singapore, has no email setup, and lacks basic security headers. Combined with the invalid SSL, the technical setup feels rushed and untrustworthy — not what you'd see behind a genuine bank portal.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.