Wrote: Fatbardh Dema
A message (SMS) was sent to the phones of Kosovo citizens stating "Your package has arrived at our warehouse. We cannot deliver it because the address information is incorrect."
Through this SMS with the sender name “Posta e Kosova”, a call is made to click on a link, with the justification that the correct information must be provided, so that the order can be sent within 12 hours. The link in this SMS appears as “postakosoves.online”.
What's wrong with this SMS?
After verification by hibrid.info, it was confirmed that the number that sent this message to the phone has the prefix +60, which belongs to the state of Malaysia. Meanwhile, the link presented in the SMS is suspicious and is not the official website of the Kosovo Post.
SMS sent from the number with the prefix + 60:
Kosovo Post: Your package has arrived at our warehouse. We cannot deliver because the address information is incorrect. We will deliver within 12 hours after you have entered the correct information.
(Answer Y, then exit SMS and reopen to activate the link or copy the link and open it in your browser)
What did hibrid.info find?
The findings show that the prefix of the number that sent this SMS belongs to the state of Malaysia. (see here)
Also, hibrid.info, using the website verification platforms “pr-cy.io” and “getsafeonline.org”, has found that the link contained in the SMS is suspicious and suspicious activities have been found in it. (see here and here)
After verification, it was confirmed that the official website of the Post of Kosovo does not own the domain “.online”, as claimed in the SMS. The official website of the Post of Kosovo is “postakosoves.com”. (see here)
Hibrid.info had handled a similar SMS in June, which was sent from a number with the prefix +63 belonging to the Philippines. (see here)
Analyze:
An SMS with the prefix +60 belonging to the state of Malaysia has been received by some citizens on their phones, claiming to be from the Kosovo Post. The message calls for clicking on a link in order to provide information to receive a package.
Hibrid.info, after checking and verifying the facts, has found that the link presented in the SMS is suspicious and that suspicious activities have been found in it.
Also, this link is presented to us with the name "postakosoves.online", which is not the official website of the Post of Kosovo.
The official website of the Post of Kosovo is “postakosoves.com”.
Based on the working methodology, hibrid.info evaluates this SMS as "Scam".
Reasoning:
The “Deception” rating is given to informational content that is manipulated in terms of visual (deepfake, cheapfake), audio, or textual content to deceive the audience. This form of deception is usually used to produce false and manipulated content.