Almost clicked a fake DHL link in my email, the tracking number was the tell
Last Tuesday around 6am I got an email saying a package needed a $2.99 redelivery fee, which is weird since I wasn't expecting anything. The link went to a page that looked just like the real DHL site but the address bar showed dhl-redelivery dot info. I hovered over the button first and saw it pointed somewhere totally different, so I closed the tab and forwarded it to my provider's phishing address. What's the quickest way you check a link before clicking, just hover or do you use a tool?
Boy, $2.99 to redeliver a package you never ordered, that's not a fee, that's a cover charge for a party you weren't invited to. Your hover trick is solid and honestly it catches most of these clowns, but the tracking number was a good tell too since real ones have a pattern and fake ones look like someone mashed the keyboard. I also look at the sender's actual email address, not the display name, because "DHL Express" showing up from something like dhl@randomgarbage.ru is a dead giveaway. If I'm on my phone where hovering doesn't work, I just long press the link to see where it really goes before my thumb gets any bright ideas. The address bar thing you caught is the big one, dhl-redelivery dot info is exactly the kind of cheap knockoff domain these scammers love. Good job not clicking, and forwarding it to your provider is the right move so they can block the sender for everyone else too.