Just tried to sell some tickets for tomorrow’s ColdPlay in Paris (cannot go), and was approached within minutes by somebody pretending to be a Swede in Luxembourg and willing to buy them. My naivety was that posting on [luxembourgexpats.lu](https://luxembourgexpats.lu) made me think they were somebody local.
Long story short, tried to convince me to print them and send them by post/courier. Said, weird, but ok. Next they asked me to click on an url and fill in my details (more red flags). When I saw credit card details, was one flag too many and stopped.
You can see the screenshot and the analysis of the webpage used here: [https://urlscan.io/result/18c8ccf9-8551-47c4-924f-375acb4bfdef/#summary](https://urlscan.io/result/18c8ccf9-8551-47c4-924f-375acb4bfdef/#summary)
If you go to a first file used, you can see they run this scheme for multiple other services:
[https://urlscan.io/search/#hash%3A06ca34565e1f1ebe2df31c8833af58b84baeb39d7d2aaa690bbbda09816cbd94](https://urlscan.io/search/#hash%3A06ca34565e1f1ebe2df31c8833af58b84baeb39d7d2aaa690bbbda09816cbd94)
So, beware when selling/buying on Internet in Luxembourg and you are asked to fill forms online with [post.lu](https://post.lu) or other local companies, particularly verify the URL/domain/legitimacy of the details requested.
o/
1 comment
Please do report them with CIRCL too so the site can be taken down
https://www.circl.lu/report/