47.252.26.67/32

[g0d33p3rsec]

Comments

IP address hosting multiple domains for USPS delivery failure lures. See also: Phishing-Database/phishing#525

Wildcard domain records

32.67.26.252.47|phishing

Sub-Domain records

No response

Hosts (RFC:953) specific records, not used by DNS RPZ firewalls

No response

SeafeSearch records

No response

Screenshots

Screenshot

Links to external sources

https://uspsyluqn.top/i/
https://uspsyluuaz.top/i/
https://uspsyluqmm.top/i/
https://uspsylughf.top/i/
https://uspsyluzuq.top/i/
https://uspsyluoku.top/i/ 
https://uspsylughf.top/i/
https://djhsajh.top/i/
https://4c5wa42c.top/i/

g0d33p3rsec
Contributor
g0d33p3rsec commented Dec 11, 2024 •
Phishing Domain/URL/IP(s):

43.159.146.246
https://usps.com-tracking-helpsota.cc/info/ 
https://usps.com-tracking-helpsinl.cc/info/
https://usps.com-tracking-helpinua.cc/info/
https://usps.com-tracking-helpinik.cc/info/ 
https://usps.com-tracking-helpina.cc/info/
https://usps.com-tracking-helpinca.cc/info/
https://usps.com-tracking-helpinck.cc/info/
https://usps.com-tracking-helpinn.cc/info/
https://usps.com-tracking-helpinna.cc/info/ 
https://usps.com-tracking-helpinnk.cc/info/ 
https://usps.com-tracking-helpsock.cc/info/

23.249.20.36
https://uspsdbsr.com/i/
https://usps.com-trackgqu.top/i/

43.135.172.104
https://trackwcec.top/i/
https://trackwcgt.top/i/
https://trackwphx.top/i/
https://trackwsmo.top/i/ 
https://trackwpmd.top/i/
https://trackwcgt.top/i/
https://dhlhzx.top/de/
https://dhlpiy.top/de/
https://dhlhzx.top/de/

47.252.26.67
https://uspsyluqn.top/i/
https://uspsyluuaz.top/i/
https://uspsyluqmm.top/i/
https://uspsylughf.top/i/
https://uspsyluzuq.top/i/
https://uspsyluoku.top/i/ 
https://uspsylughf.top/i/
https://djhsajh.top/i/
https://4c5wa42c.top/i/

8.221.101.91
https://usps.com-qwtz.top/us/ 
https://usps.com-iuyg.top/us/
https://usps.com-hjks.top/us/
https://usps.com-hjre.top/us/
https://usps.com-qmvc.top/us/
https://canada.postescanqs.top/ca/ 

Impersonated domain

tools.usps.com
www.mydhli.com
www.canadapost-postescanada.ca

Describe the issue

Additional IP addresses hosting domains used for USPS delivery failure lures.
Related external source

https://urlscan.io/ip/43.159.146.246
https://urlscan.io/result/b1a08537-d00d-4097-a3ec-eb9647e32f67/
https://urlscan.io/result/413815ff-34ee-469d-a0f5-3795a78de8c7/
https://urlscan.io/result/4d2c082c-117a-4968-8fa7-cb2e246d0b67/
https://urlscan.io/result/786d0358-ed02-43ea-abfe-a77bef771157/
https://urlscan.io/result/94b51dee-3051-4569-95a9-a9dee8623c21/
https://urlscan.io/result/80c3e7f0-e76d-47fd-8a9e-7c05ac1c6ea2/
https://urlscan.io/result/de26ec2c-6d11-43c3-a032-aac420ce7089/
https://urlscan.io/result/982164d2-a075-4299-832d-97b63a359e4e/
https://urlscan.io/result/efba5a2c-256e-4df6-aefd-0c540b63e170/
https://urlscan.io/result/940c115f-7af3-4772-9fa7-71fc06e88901/
https://urlscan.io/ip/23.249.20.36
https://urlscan.io/result/f9893e40-a832-4b30-9200-c385d2528848/
https://urlscan.io/result/ef2c0c84-f8aa-4e79-8536-f3b396c03ce9/
https://urlscan.io/ip/43.135.172.104
https://urlscan.io/result/45e73303-1764-49f7-b10f-9146df3b7ce3/
https://urlscan.io/result/7a085803-837d-40cf-b256-4a8715d960c8/
https://urlscan.io/result/0ccd3a1c-79bb-4a53-9b15-d14ad19fa3cf/
https://urlscan.io/result/b12ff332-2584-488c-9efd-4005e5b132c8/
https://urlscan.io/result/36e7fdd1-d59d-477c-86c9-50768a751698/
https://urlscan.io/result/5b2c4d3e-ba02-4be5-92af-7bedf6e1b9d0/
https://urlscan.io/result/f22634dc-4f3e-4c56-b3c9-ad31f354ac95/
https://urlscan.io/result/7b79c79d-d0ef-47bc-9e3c-a410b907c8ae/
https://urlscan.io/result/f34226c5-f806-4eaa-9d1e-4c081d23c059/
https://urlscan.io/ip/47.252.26.67
https://urlscan.io/result/c2df6eb7-5fa9-43f7-b75a-d0d4a6767a55/
https://urlscan.io/result/577edaf9-7299-4283-ad10-c75ace44b0bb/
https://urlscan.io/result/05e7cb1f-d8d2-4f96-b4f9-11bde1ab7328/
https://urlscan.io/result/8481ec2f-8e93-4aed-9340-1139d647fb30/
https://urlscan.io/result/c5353c4f-c077-4e6e-9a8b-44910f432864/
https://urlscan.io/result/c6ebacda-7f9c-4db8-a5b2-101a8a68b9b6/
https://urlscan.io/result/c4081c38-9930-405e-a952-e259683ff977/
https://urlscan.io/result/d559f976-f455-40fb-a2df-1568952fdaf1/
https://urlscan.io/result/987e4530-e138-414e-91fb-99dfcaca3594/

logs from uBlock Origin

N/A