Today I just received this text message and I was waiting for new mouse for my computer, because the wire got chewed by my cats. I thought my package got lost because of this message.
So I click the link! Foolishly!
Then it dawn on me how impressive and high quality this scam was until I check for URL
Don’t click the link as shown by real USPS
This was the message I received, and when the URL at the top was
“USPS Message: Your package is currently on hold at our facility because of insufficient address information. Please verify and update your delivery address through the link provided below to facilitate timely delivery: https://cutt.ly/0efdSAXv?CDd=2t79xgERSO The US Postal team wishes you a wonderful day!”
I click the link first thing I noticed was the URL was different.
On my phone I usually wouldn’t notice. I think the average person wouldn’t notice, I think browsers need to introduce cross check URL behaviour to fix this scamming for all users Google Chrome and Opera should implement it on their phone browsers to check the URL against official URL usage.
then it asked for my address ok type in some fake stuff
I never seen this before that USPS would ask for 0.16 cents? it was unusual because when the government changes me fees I never been asked such a low amount, I expected more that was the redflag immediately asking for too little ironically 0.16 cents.
So I click more around the app and I was redirect to USPS someone could just assume its real it looks real! but isn’t.
I went back to the fake URL https://usvx.saubiouv.top/ and to the footer! it showed me the USPS has pinterest? I was like why does USPS need a pinterest? this was the big reveal that USPS has a pinterest why? but the real USPS does have pinterest and the footers didn’t match.
So I compared them REAL vs FAKE
So that confirmed it for me FAKE!, Now lets go see whos doing it now
We can use Whois to search who made it
https://www.whois.com/whois/saubiouv.top
We have domain provider gname.com out of singapore its a dead-end all the information is redacted for privacy. Governments cannot resolves these scams because of international law hackers will hide behind and use massive automation to trick people into giving their credit card information.
