Wrote: Fatbardh Dema
A short electronic message (SMS) was sent to Kosovo citizens on Wednesday (January 28th) claiming to be from the private mail center "DHL Express" in Kosovo.
In this SMS it says: "Your DHL package cannot be delivered due to an incomplete or incorrect address. The package is temporarily held at the DHL Express center in Kosovo," and then a call is made to click a link to update your address information so that the "package" can be re-sent.
What's wrong with this SMS?
After verification of the facts conducted by hibrid.info, it was confirmed that the SMS was sent from a private email and not from the official email of the "DHL" post office in Kosovo, and the link presented in the content is fraudulent.
Hibrid.info first verified the sender of this SMS, which has nothing to do with DHL mail in Kosovo. The sender's email is "finley3169@icloud.com", while on the official Facebook page of DHL mail in Kosovo, another email appears: "info@3plog.net". (see here)
Hibrid.info clicked on the link presented in the SMS, but Chrome (Google's web browser) marked it as a suspicious website.
"Attackers on the page you tried to visit could trick you into installing programs or revealing information like passwords, phone numbers, or credit card numbers. Chrome strongly recommends that you return to a secure page."
"Chrome has built-in security features to protect you while browsing, like Google Safe Browsing, which recently detected phishing on the page you tried to visit. Phishing pages pretend to be other pages to trick you."
Even website verification platforms like "Scamdoc.com"and "Scamadviser.com"They have described this website as suspicious and deceptive."
What is “Phishing”?
Phishing is a fraud method where attackers attempt to obtain personal or financial information from victims by posing as trusted sources, usually through emails, messages, or fake websites. (see here).
The fraudulent website in this SMS is “ksdhl.com/help”. While the official DHL website in Kosovo is “mydhl.express.dhl/kv".
Analyze:
A fraudulent SMS claiming to come from DHL Express in Kosovo has been sent to Kosovo citizens, falsely informing them of a "package" that cannot be delivered due to an incomplete address and inviting them to click on a link to update their data.
After verification by hibrid.info, it was confirmed that the message (SMS) was not sent by DHL, but by a private email, while the link included in it is fraudulent. This website has been classified as dangerous by the Chrome browser and by website verification platforms, which warn of the risk of phishing.
Based on its work methodology, hibrid.info assesses this content (SMS) as "Fraud".
Reasoning:
The “Deception” rating is given to informational content that is manipulated in terms of visual (deepfake, cheapfake), audio, or textual content to deceive the audience. This form of deception is usually used to produce false and manipulated content.