hermers[.]com-dpwc[.]vip

This domain, hermers.com-dpwc.vip, is flagged as an active high-risk phishing site targeting DHL customers, based on infrastructure analysis and threat intelligence. Registered on June 12, 2026, through Gname.com Pte. Ltd., the domain appears on one security blocklist and is explicitly labeled for social engineering by Google Safe Browsing. VirusTotal detections from 12 of 91 security vendors further corroborate its malicious classification.

The domain's recent creation, combined with its registration via a registrar frequently associated with abusive domains, aligns with patterns observed in phishing campaigns. While the exact content of the site remains unanalyzed, the convergence of blocklist entries, Safe Browsing flags, and vendor detections provides concrete evidence of its fraudulent intent. Defenders should treat this domain as compromised and prioritize blocking or sinkholing it to mitigate credential theft or malware distribution risks.

Additional scrutiny of related infrastructure, such as hosting IP ranges or SSL certificates, is recommended to identify linked threats. No brand-specific artifacts beyond the DHL impersonation context are confirmed, and the absence of further technical details (e.g., ASN, hosting provider) limits attribution to specific threat actors.