UPS scammer

Popup - https://id1757693-trackingups.com/Find?sslchannel=true&sessionid=TxTwJNA2QEknE82h3lLlSJcxZaKndDVG6EuW9fo9cajiik48UkpLqMPMQnf6qPGbq0GpmbrXKmTcqBUKuZDhEDxkE3Q1u51hdRpzHLXifM3lGf8SzYoGXN1kqpAkkPqDmb

Registered via Alibaba Singapore on November 26, 2022 - Whois id1757693-trackingups.com

Associated Phone Number - [email protected]

Popup will first ask for your ZIP code before informing you that your package is “on hold” at their warehouse.

In order to reschedule delivery, victims must provide their

  • Name
  • Home Address
  • Phone Number
  • Email Address
  • CREDIT CARD INFORMATION (FOR “$1.45 SHIPPING FEE”)

Afterwards, users will be transferred to Global Shipping & Logistics Services | UPS - United States

Didnt even bother to correctly script their own website. Ive been sending them random letters and numbers in the form on the website LOL

Their payment information validation script: https://id1757693-trackingups.com/us_assetz/js/payment.js

They don’t validate form data from the first form, but do seem to validate payment information.


Any idea what getTokenWithPassword refers to?