GrizzlyGrizzly
Recent phishing
Phishing

Impersonating UPS

Intent: Persuasion

  • Domain is not operated by UPS
  • DNS nameservers do not match UPS's known infrastructure
  • TLS certificate has no organization information
  • Domain was registered very recently
  • Domain not registered through UPS's usual registrar
  • SPF record does not reference UPS's infrastructure

UPS-branded delivery fee notice prompting payment to release a held parcel

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 37 days ago · Oct 5, 2026, 08:38 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL