A few days back, we reported how scammers were attempting to trick users by creating a fake website that looked identical to Flipkart. Now, a fresh scam attempt has come to light — this time involving fake SMS messages claiming a missed parcel delivery.
The SMS being circulated reads: “your parcel delivery has been attempted for the 2nd time please confirm your details or your items will be returned: https://delhiveryar.com/in”
From the very beginning, the message raises suspicion. One of our team members received this SMS from the numbers +91 9324050566 and +91 8917251600. Upon investigation, we discovered that the provided URL behaves differently depending on the device:
On Desktop → It redirects to the official Delhivery website: https://www.delhivery.com/
On Mobile → It opens a phishing site designed to mimic the real Delhivery website.
How the Scam Works
When the fake site loads, it displays the following message:
“Your parcel tracking number: 3812472769
Delivery Failure Notification
Your package was not delivered due to an unclear delivery address.
Your package has been returned to our fulfillment center.
Please update your address and we will ship again on 28/09.”
Clicking Continue takes victims through three fake pages:
home.html – shows the fake notification.
address.html – asks users to enter personal details.
card.html – prompts for payment details.
Finally, it leads to a success.html page, falsely confirming the transaction. Even when dummy card details were entered, the site displayed a “Payment Successful” message — confirming that its only purpose is to harvest sensitive data like card details and personal information.
Upon checking the Whoisinfo, it revealed that the domain points to the IP address 43.131.228.73, which is hosted on a Tencent Cloud Server based in South Korea. Additionally, the domain makes use of Blob URLs. These are temporary links generated by the browser to display files such as PDFs or videos locally, and in this case, they are being misused to disguise malicious content. This confirms that the site has been set up purely for phishing activity.
This operation is a classic phishing scam, cleverly designed to trick unsuspecting users into revealing their information. The fake site convincingly mirrors Delhivery’s official platform (Delhivery is an Indian logistics and supply chain company), making it particularly dangerous. Users are strongly advised to ignore such SMS messages, verify delivery updates only through the official Delhivery website (delhivery.com) or app, and never share card or personal details on any suspicious links.
If you have received such a message or fallen victim to this scam, you can report it to the National Cyber Crime Reporting Portal at https://cybercrime.gov.in/ or call the dedicated helpline number 1930 from your smartphone. Staying alert and cautious is the best way to protect yourself from these kinds of online frauds.
