Add 170.106.81.46 - USPS delivery failure and ezdrivema lures

[g0d33p3rsec]

Phishing Domain/URL/IP(s):

170.106.81.46
com-tracking-cao.cc
com-tracking-cap.cc
com-tracking-cbp.cc
com-tracking-ccp.cc
com-tracking-cdo.cc
com-tracking-cdp.cc
com-tracking-ceo.cc
com-tracking-cfo.cc
com-tracking-cfp.cc
com-tracking-cgp.cc
com-tracking-chp.cc
com-tracking-cjp.cc
com-tracking-cko.cc
com-tracking-ckp.cc
com-tracking-cmp.cc
com-tracking-cnp.cc
com-tracking-cso.cc
com-tracking-csp.cc
com-tracking-cto.cc
com-tracking-cvp.cc
com-tracking-cxp.cc
com-tracking-usxxse.cc
com-tracking-usxxve.cc
com-tracking-usxxwe.cc
com-tracking-usxxye.cc
com-tracking-usxxze.cc
com-tracking-vvbv.cc
com-tracking-vvcv.cc
com-tracking-vvem.cc
com-tracking-vvmv.cc
com-tracking-vvnv.cc
com-tracking-vvqm.cc
com-tracking-vvrm.cc
com-tracking-vvwm.cc
com-tracking-vvxv.cc
com-tracking-xxax.vip
com-tracking-xxcx.vip
ezdrivemaev.vip
ezdrivemafv.vip
ezdrivemaxbc.vip
ezdrivemaxbv.vip
ezdrivemaxcv.vip
http://ezdrivemaev.vip/add/
http://ezdrivemafv.vip/add/
http://ezdrivemaxbc.vip/add/
http://ezdrivemaxbv.vip/add/
http://ezdrivemaxcv.vip/add/
http://usps.com-tracking-cao.cc/info/
http://usps.com-tracking-cap.cc/info/
http://usps.com-tracking-cbp.cc/info/
http://usps.com-tracking-ccp.cc/info/
http://usps.com-tracking-cdo.cc/info/
http://usps.com-tracking-cdp.cc/info/
http://usps.com-tracking-ceo.cc/info/
http://usps.com-tracking-cfo.cc/info/
http://usps.com-tracking-cfp.cc/info/
http://usps.com-tracking-cgp.cc/info/
http://usps.com-tracking-chp.cc/info/
http://usps.com-tracking-cjp.cc/info/
http://usps.com-tracking-cko.cc/info/
http://usps.com-tracking-ckp.cc/info/
http://usps.com-tracking-cmp.cc/info/
http://usps.com-tracking-cnp.cc/info/
http://usps.com-tracking-cso.cc/info/
http://usps.com-tracking-csp.cc/info/
http://usps.com-tracking-cto.cc/info/
http://usps.com-tracking-cvp.cc/info/
http://usps.com-tracking-cxp.cc/info/
http://usps.com-tracking-usxxse.cc/info/
http://usps.com-tracking-usxxve.cc/info/
http://usps.com-tracking-usxxwe.cc/info/
http://usps.com-tracking-usxxye.cc/info/
http://usps.com-tracking-usxxze.cc/info/
http://usps.com-tracking-vvbv.cc/info/
http://usps.com-tracking-vvcv.cc/info/
http://usps.com-tracking-vvem.cc/info/
http://usps.com-tracking-vvmv.cc/info/
http://usps.com-tracking-vvnv.cc/info/
http://usps.com-tracking-vvqm.cc/info/
http://usps.com-tracking-vvrm.cc/info/
http://usps.com-tracking-vvwm.cc/info/
http://usps.com-tracking-vvxv.cc/info/
http://usps.com-tracking-xxax.vip/info/
http://usps.com-tracking-xxcx.vip/info/

Impersonated domain

tools.usps.com
https://www.mass.gov/ezdrivema

Describe the issue

IP address is hosting multiple algorithmically generated domains used for USPS delivery failure lures. 198.11.175.44 is also hosting lures for ezdrivema using similar algorithmically generated domain names.

Related external source

https://urlscan.io/result/3e744040-31a5-492b-a456-13a07df314a5/
https://urlscan.io/result/943715a4-4f32-4e09-b50d-9bad13098b3b/
https://urlscan.io/result/eb694e05-67e4-4616-ae80-d6d42751661a/
https://urlscan.io/result/f71be8b1-c3f2-47e9-a3de-2dcd2b477868/
https://urlscan.io/result/428d6004-ddaf-4107-a4bb-fc26d3177f22/
https://urlscan.io/result/e7e91ff4-4cbe-478a-a479-be86c4e2b4aa/
https://urlscan.io/result/961c7a54-4385-4de8-a0fd-c53e9a252958/
https://urlscan.io/result/12d930c8-027a-43da-b216-dc4f7f2d7ac5/
https://urlscan.io/result/aa249c18-e459-45f1-b29d-20567d02e712/
https://urlscan.io/result/883a7df0-2078-4232-854f-bbbb849c9b00/
https://urlscan.io/result/39e0c73e-47ff-4462-b368-45be0f1cf072/
https://urlscan.io/result/178c8538-6334-4a84-b20f-25ccac227e48/
https://urlscan.io/result/3b0e0bfb-b6a5-4459-a575-81158251bdee/
https://urlscan.io/result/5b5cc323-0dde-4250-900a-9bf1207b8ab4/
https://urlscan.io/result/27c8fd93-ff1a-49c8-be86-ae57cea7680d/
https://urlscan.io/result/8bb14ab1-43d3-437a-92d1-9103046e60f4/
https://urlscan.io/result/0946bf7e-2cb5-4159-8611-641297ab6c01/
https://urlscan.io/result/72e66da2-0eea-4885-aa4c-5b0cc55179f1/
https://urlscan.io/result/cf022cfe-0121-4e0c-af33-4e85c4c3693e/
https://urlscan.io/result/2069425e-230f-4dde-807d-f063e5574279/
https://urlscan.io/result/6459c944-dfef-42a7-8103-332c79641596/
https://urlscan.io/result/2bad213e-3f47-413f-ad22-1c0db6ccb0b3/
https://urlscan.io/result/253353da-9e1a-4ef0-a7f9-02c64c0310c1/
https://urlscan.io/result/461fd3bc-1760-4480-98d8-3294c12b35f7/
https://urlscan.io/result/5e73c036-a98b-457b-abf0-1b6bc8b42f64/
https://urlscan.io/result/0eca7af9-3637-450d-a377-f2e44887bbaa/
https://urlscan.io/result/8ebf56f8-6c21-47fb-b3d7-e5aa18284153/
https://urlscan.io/result/f7dbc304-e31a-4684-8fc4-f70fefe1eb0f/
https://urlscan.io/result/696453ae-6f63-4ed6-a663-d00d343b301c/
https://urlscan.io/result/a6c82518-d7a9-4960-b6ba-9196fe1f3253/
https://urlscan.io/result/7b177104-2716-4d35-858c-50c30c86b1ca/
https://urlscan.io/result/ec48d10f-70c0-4839-bf8b-7ea295906e87/
https://urlscan.io/result/b0015bde-2265-48f4-9304-ad41c6164e3b/
https://urlscan.io/result/d6605e8c-7668-4625-b72c-c793a939c084/
https://urlscan.io/result/4a1bba33-499e-467b-ba04-0e208d4218ca/
https://urlscan.io/result/3a905859-46d4-46c9-8ce2-79d38987f870/
https://urlscan.io/result/b26da90c-ed36-4916-b43f-5987a1cb9a8f/
https://urlscan.io/result/21912d96-a9ba-4bbb-bfff-6ef4a48848f0/
https://urlscan.io/result/644fdab3-f8da-41cb-aba9-3fcc1066aa13/
https://urlscan.io/result/68ea6c74-72c0-49d2-b57f-bd66aab7e130/
https://urlscan.io/result/f4cf3da7-138d-4068-9217-b00e265f3e91/
https://urlscan.io/result/5e1d0d65-d17f-4bb2-9856-02031ea9f432/

Screenshot

Click to expand