UPS scammer

Popup - https://id1757693-trackingups.com/Find?sslchannel=true&sessionid=TxTwJNA2QEknE82h3lLlSJcxZaKndDVG6EuW9fo9cajiik48UkpLqMPMQnf6qPGbq0GpmbrXKmTcqBUKuZDhEDxkE3Q1u51hdRpzHLXifM3lGf8SzYoGXN1kqpAkkPqDmb

Registered via Alibaba Singapore on November 26, 2022 - Whois id1757693-trackingups.com

image

Associated Phone Number - [email protected]

Popup will first ask for your ZIP code before informing you that your package is “on hold” at their warehouse.

In order to reschedule delivery, victims must provide their

  • Name
  • Home Address
  • Phone Number
  • Email Address
  • CREDIT CARD INFORMATION (FOR “$1.45 SHIPPING FEE”)

Afterwards, users will be transferred to Global Shipping & Logistics Services | UPS - United States

1 Like

Didnt even bother to correctly script their own website. Ive been sending them random letters and numbers in the form on the website LOL

Their payment information validation script: https://id1757693-trackingups.com/us_assetz/js/payment.js

They don’t validate form data from the first form, but do seem to validate payment information.

image
Any idea what getTokenWithPassword refers to?