Got this text on 2/8/25 at 12:57 central time. The pic of the text is below:
Please pay your FastTrak Lane tolls by February 8, 2025. To avoid a fine and keep your license, you can pay at
https://paytollkgf.top/ezdrivema
(Please reply Y, then exit the text message and open it again to activate the link, or copy the link into your Safari browser and open it)
Thank you guys for all you do.
The domain is registered in Hong Kong.
I set my browser user-agent to an old Chrome on Android, and got this:
impersonating the Massachusetts DOT.
The next page, phishing for personal data:
The next page asks for credit card details. I used bogus data from https://www.fakenamegenerator.com/
It seems like it does some kind of verification as it sends the data back to the same IP address via HTTP POST and responds with an error message “Your card is not supported. Please use a different card and try again.”
Sounds about right. Thank you.
