I assume it was a phishing site where the threat came if you actually provided them with details (I didn't receive the DHL one, but did test the Metamask link

I assume it was a phishing site where the threat came if you actually provided them with details (I didn't receive the DHL one, but did test the Metamask link in a safe browser environment. It was just a phishing site to try to get people's crypto credentials)