Phishing sites impersonating Dhl

PhishDestroy has recorded 209 phishing domains impersonating Dhl since 2025-08-06, 11 of them in the last 30 days. The most used registrars are Gname.com and PublicDomainRegistry.com; the most common TLDs are .com and .app. The official Dhl domain is dhl.com: any other site asking for your login or wallet is not Dhl.

209
Domains, all time
11
Last 30 days
101
Online at last check
20
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 12026-07-26: 02026-07-27: 52026-07-28: 02026-07-29: 12026-07-30: 12026-07-31: 32026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 12026-08-05: 12026-08-06: 32026-08-07: 02026-08-08: 12026-08-09: 02026-08-10: 12026-08-11: 22026-08-12: 32026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 22026-08-19: 02026-08-20: 02026-08-21: 12026-08-22: 42026-08-23: 22026-08-24: 12026-08-25: 02026-08-26: 12026-08-27: 02026-08-28: 12026-08-29: 02026-08-30: 02026-08-31: 12026-09-01: 02026-09-02: 12026-09-03: 02026-09-04: 12026-09-05: 12026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 32026-09-10: 12026-09-11: 22026-09-12: 12026-09-13: 02026-09-14: 12026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 12026-09-19: 12026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 12026-09-25: 02026-09-26: 02026-09-27: 12026-09-28: 02026-09-29: 12026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 12026-10-08: 12026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 22026-10-14: 12026-10-15: 02026-10-16: 22026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 12026-10-21: 02026-10-22: 0
Dhl phishing domains detected per day: 60 from 2026-07-25 to 2026-10-22; peak 5.

How to tell a fake Dhl site

Official domain: dhl.com.

Words most often added to the brand in reported domains: edgeone, tracking, order, dhlexpress, express, delivery, webauthor, events, prjx, global.

  • Type the address yourself or use a bookmark; phishing links for Dhl arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Dhl does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Dhl phishing domains

The 50 most recently detected domains impersonating Dhl
DomainFirst detectedStatus at last checkRegistrar
de.l3-installationskonsult.se2026-10-20OnlineOne.com
misspport.adieforhair.com2026-10-16OnlineGoDaddy.com
bhumistyle.shop2026-10-16OnlineDynadot
dhl-engagement-copilot.bpventures.com.ar2026-10-14Online—
ehtlimo.com2026-10-13OfflineName.com
chemcleanonsiteservicesinc.com2026-10-13OnlineRegistrar.eu
reslug.link2026-10-08OnlineCloudflare
apextoomining.com2026-10-07OnlineNICENIC
updthl.lat2026-09-29OfflinePorkbun
intlagixtlckmqsaca.com2026-09-27OnlineSpaceship
cleverservicelogistics.com2026-09-24OnlineSpaceship
dhl-tracking.com2026-09-19UnknownNICENIC
kkkksgsgdfdjfdhhfdhlhdflhxkkkk-dpxklwputyu8.edgeone.dev2026-09-18OnlineMarkMonitor
dhlcourier-services.live2026-09-14OnlineDynadot
fxlifestyletrades.live2026-09-12OnlineDynadot
agsksolutionscom-oss.github.io2026-09-11OfflineGitHub Pages
hjelectrics.com2026-09-11OnlineHiChina (www.net.cn)
dhl.entregas.forum2026-09-10OfflineDynadot
traciamento.github.io2026-09-09OfflineGitHub
aeliyamarinetechhq.shop2026-09-09Offline—
adlermodehausfashion.shop2026-09-09OnlineDynadot
dhl.firstlaw.dev2026-09-05OnlineGoDaddy.com
kombijdhl.nl2026-09-04OnlineCombell
interniauto.it2026-09-02OnlinePanservice s
tordaily.com2026-08-31OnlineDNS Africa
dhl-kwi.us.cc2026-08-28OnlineGname.com
dhillshopping.com2026-08-26OnlineTUCOWS.COM
blackpykv66cybipwjxdo6c6mvk3uxfih736ljmzeultufyx5y9fohyd.icu2026-08-24OnlineNICENIC
dhlvarese.it2026-08-23OnlineRegister S.p.a
delivery-dhl.muttinfo.com2026-08-23OfflineWild West Domains
dhlorders.de2026-08-22Online—
myparcelgst-tracking.netlify.app2026-08-22OfflineNetlify
dhltrackservices.vercel.app2026-08-22OfflineVercel
your-parcel-logistics-global-tracking.vercel.app2026-08-22OnlineVercel
hachas.click2026-08-21OnlineSav.com
dgfcourier.de2026-08-18Online—
dhlde.wallbee.dk2026-08-18OnlineNHL DATA ApS
digitech.pk2026-08-12Online—
buyghar.com2026-08-12OnlinePublicDomainRegistry.com
headshotsandcorporate.com2026-08-12OnlinePublicDomainRegistry.com
express-dhl-dpe3103d2mga.edgeone.dev2026-08-11OnlineTencent Cloud
dhltools.se2026-08-11OnlineEPAG
misilabario.cl2026-08-10OnlineNIC Chile
korea4u.taplink.kz2026-08-08Online—
random-chocolate-trkjykfk.edgeone.dev2026-08-06OnlineTencent Cloud
allegrolokalnie.lokalna-1920088771.lol2026-08-06OfflineGlobal Domain
flowsdghel.blinkusercontent.com2026-08-06OfflineCloudflare
inquisitive-teal-omezr4ob.edgeone.dev2026-08-05OnlineTencent Cloud
unaware-violet-zdvlmj66.edgeone.dev2026-08-04OnlineTencent Cloud
sominxdocuments.net2026-07-31OnlineNICENIC

All 209 Dhl reports

Where they are registered and hosted

Registrars

  1. Gname.com12
  2. PublicDomainRegistry.com9
  3. Web Commerce Communications9
  4. Cloudflare8
  5. Dynadot8
  6. NameSilo7
  7. Aceville7
  8. GoDaddy.com7

Top-level domains

  1. .com76
  2. .app12
  3. .cc11
  4. .io10
  5. .cfd8
  6. .dev8
  7. .org5
  8. .net5

Hosting networks

  1. CLOUDFLARENET, US26
  2. Cloudflare, Inc.16
  3. AS-COLOCROSSING, US14
  4. Tencent Building, Kejizhongyi Avenue11
  5. AMAZON-02 - Amazon.com, Inc., US10
  6. Amazon.com, Inc.9
  7. TENCENT-NET-AP-CN Tencent Building, Kejizhongyi 7
  8. FASTLY - Fastly, Inc., US7

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Dhl; share of all PhishDestroy reports: 0.09%.