Not sure which forum this belongs in…
I received an SMS this evening from a new number +992 70 214 0835 which appears to be from Tajikistan.
Bonus points if you know where that is, without having to look it up.
The SMS content was:
"Shopback: Hurry! Due to a system upgrade, some of your cashback rewards are about to expire. Activate them now by clicking" followed by a bit.ly link…
The bit.ly link checker decodes the link to be
https://shopback.zip-safety.info/#/m?state= blah blah blah…
which is a "Welcome back!" login style page (with no branding), requesting your mobile number or email address
The domain zip-safety.info was registered on 20 April 2024, but the registrant info is redacted
https://au.godaddy.com/whois/results.aspx?domain=zip-safety.…
So if you also get this SMS, its probably best to not click on the link
Shopback was fined last year for leaking piles of data (although breach was a few years ago, now I looked it up), I guess someone decided to put it to use.