Wrote: Fatbardh Dema
A message (SMS) has been sent to the phones of Kosovo citizens stating "Your package cannot be delivered because there is no house number in the address."
This SMS calls for clicking on a link, with the justification of updating the home address to reorganize the delivery of the package.
What's wrong with this SMS?
After fact-checking by hibrid.info, it was confirmed that the number that sent this message to the phone has the prefix +63, which belongs to the Philippines. Meanwhile, the link presented in the SMS is suspicious and aims to obtain and misuse personal data.
SMS sent from the number with the prefix + 63:
What did hibrid.info find?
The first suspicion was the prefix of the number that sent this SMS. Hibrid.info has researched which country has this prefix and the findings show that it belongs to the country of the Philippines. (see here)
Also, hibrid.info, using the website verification platform “urlvoid.”, has found that the link contained in the SMS is suspicious and that the findings indicate that it is intended to obtain personal data. (see here)
If we take this link and open it in “Google”, it shows that it is RISKY (dangerous), and it also shows the website called “postaekosoves.icu”. (see here)
After verification, it turns out that the Kosovo Post does not own this website with the suffix “.icu”, but “.com”. (see here)
Regarding this SMS, the Post of Kosovo itself has reacted through its official Facebook page, through which it is called upon not to click on the link presented in the message. (see here)
The Information and Privacy Agency has also called on citizens not to fall prey to scams aimed at obtaining and misusing personal data. (see here)
Analyze:
An SMS with the prefix +63 belonging to the state of the Philippines has arrived on the phones of some citizens with the call to click on a link in order to change their home address, in order to receive a package.
Hibrid.info, after checking and verifying the facts, has found that the link presented in the SMS is dangerous and aims to obtain personal data.
Also, this link is presented to us with the name "postaekosoves.icu", which is not the official website of the Post of Kosovo, as the official one has the suffix ".com".
Based on the working methodology, hibrid.info evaluates this SMS as "Scam".
Reasoning:
The “Deception” rating is given to informational content that is manipulated in terms of visual (deepfake, cheapfake), audio, or textual content to deceive the audience. This form of deception is usually used to produce false and manipulated content.