# Phishing sites impersonating Dhl

PhishDestroy has recorded 209 phishing domains impersonating Dhl since 2025-08-06, 11 of them in the last 30 days. The most used registrars are Gname.com and PublicDomainRegistry.com; the most common TLDs are .com and .app. The official Dhl domain is dhl.com: any other site asking for your login or wallet is not Dhl.

209Domains, all time

11Last 30 days

101Online at last check

20Confirmed takedowns

## New domains in the last 90 days

Dhl phishing domains detected per day: 60 from 2026-07-25 to 2026-10-22; peak 5.

## How to tell a fake Dhl site

Official domain: dhl.com.

Words most often added to the brand in reported domains: edgeone, tracking, order, dhlexpress, express, delivery, webauthor, events, prjx, global.
- Type the address yourself or use a bookmark; phishing links for Dhl arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Dhl does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Dhl phishing domains

The 50 most recently detected domains impersonating Dhl
Domain | First detected | Status at last check | Registrar | 
[de.l3-installationskonsult.se](https://phishdestroy.io/domain/de.l3-installationskonsult.se/) | 2026-10-20 | Online | One.com | 
[misspport.adieforhair.com](https://phishdestroy.io/domain/misspport.adieforhair.com/) | 2026-10-16 | Online | GoDaddy.com | 
[bhumistyle.shop](https://phishdestroy.io/domain/bhumistyle.shop/) | 2026-10-16 | Online | Dynadot | 
[dhl-engagement-copilot.bpventures.com.ar](https://phishdestroy.io/domain/dhl-engagement-copilot.bpventures.com.ar/) | 2026-10-14 | Online | — | 
[ehtlimo.com](https://phishdestroy.io/domain/ehtlimo.com/) | 2026-10-13 | Offline | Name.com | 
[chemcleanonsiteservicesinc.com](https://phishdestroy.io/domain/chemcleanonsiteservicesinc.com/) | 2026-10-13 | Online | Registrar.eu | 
[reslug.link](https://phishdestroy.io/domain/reslug.link/) | 2026-10-08 | Online | Cloudflare | 
[apextoomining.com](https://phishdestroy.io/domain/apextoomining.com/) | 2026-10-07 | Online | NICENIC | 
[updthl.lat](https://phishdestroy.io/domain/updthl.lat/) | 2026-09-29 | Offline | Porkbun | 
[intlagixtlckmqsaca.com](https://phishdestroy.io/domain/intlagixtlckmqsaca.com/) | 2026-09-27 | Online | Spaceship | 
[cleverservicelogistics.com](https://phishdestroy.io/domain/cleverservicelogistics.com/) | 2026-09-24 | Online | Spaceship | 
[dhl-tracking.com](https://phishdestroy.io/domain/dhl-tracking.com/) | 2026-09-19 | Unknown | NICENIC | 
[kkkksgsgdfdjfdhhfdhlhdflhxkkkk-dpxklwputyu8.edgeone.dev](https://phishdestroy.io/domain/kkkksgsgdfdjfdhhfdhlhdflhxkkkk-dpxklwputyu8.edgeone.dev/) | 2026-09-18 | Online | MarkMonitor | 
[dhlcourier-services.live](https://phishdestroy.io/domain/dhlcourier-services.live/) | 2026-09-14 | Online | Dynadot | 
[fxlifestyletrades.live](https://phishdestroy.io/domain/fxlifestyletrades.live/) | 2026-09-12 | Online | Dynadot | 
[agsksolutionscom-oss.github.io](https://phishdestroy.io/domain/agsksolutionscom-oss.github.io/) | 2026-09-11 | Offline | GitHub Pages | 
[hjelectrics.com](https://phishdestroy.io/domain/hjelectrics.com/) | 2026-09-11 | Online | HiChina (www.net.cn) | 
[dhl.entregas.forum](https://phishdestroy.io/domain/dhl.entregas.forum/) | 2026-09-10 | Offline | Dynadot | 
[traciamento.github.io](https://phishdestroy.io/domain/traciamento.github.io/) | 2026-09-09 | Offline | GitHub | 
[aeliyamarinetechhq.shop](https://phishdestroy.io/domain/aeliyamarinetechhq.shop/) | 2026-09-09 | Offline | — | 
[adlermodehausfashion.shop](https://phishdestroy.io/domain/adlermodehausfashion.shop/) | 2026-09-09 | Online | Dynadot | 
[dhl.firstlaw.dev](https://phishdestroy.io/domain/dhl.firstlaw.dev/) | 2026-09-05 | Online | GoDaddy.com | 
[kombijdhl.nl](https://phishdestroy.io/domain/kombijdhl.nl/) | 2026-09-04 | Online | Combell | 
[interniauto.it](https://phishdestroy.io/domain/interniauto.it/) | 2026-09-02 | Online | Panservice s | 
[tordaily.com](https://phishdestroy.io/domain/tordaily.com/) | 2026-08-31 | Online | DNS Africa | 
[dhl-kwi.us.cc](https://phishdestroy.io/domain/dhl-kwi.us.cc/) | 2026-08-28 | Online | Gname.com | 
[dhillshopping.com](https://phishdestroy.io/domain/dhillshopping.com/) | 2026-08-26 | Online | TUCOWS.COM | 
[blackpykv66cybipwjxdo6c6mvk3uxfih736ljmzeultufyx5y9fohyd.icu](https://phishdestroy.io/domain/blackpykv66cybipwjxdo6c6mvk3uxfih736ljmzeultufyx5y9fohyd.icu/) | 2026-08-24 | Online | NICENIC | 
[dhlvarese.it](https://phishdestroy.io/domain/dhlvarese.it/) | 2026-08-23 | Online | Register S.p.a | 
[delivery-dhl.muttinfo.com](https://phishdestroy.io/domain/delivery-dhl.muttinfo.com/) | 2026-08-23 | Offline | Wild West Domains | 
[dhlorders.de](https://phishdestroy.io/domain/dhlorders.de/) | 2026-08-22 | Online | — | 
[myparcelgst-tracking.netlify.app](https://phishdestroy.io/domain/myparcelgst-tracking.netlify.app/) | 2026-08-22 | Offline | Netlify | 
[dhltrackservices.vercel.app](https://phishdestroy.io/domain/dhltrackservices.vercel.app/) | 2026-08-22 | Offline | Vercel | 
[your-parcel-logistics-global-tracking.vercel.app](https://phishdestroy.io/domain/your-parcel-logistics-global-tracking.vercel.app/) | 2026-08-22 | Online | Vercel | 
[hachas.click](https://phishdestroy.io/domain/hachas.click/) | 2026-08-21 | Online | Sav.com | 
[dgfcourier.de](https://phishdestroy.io/domain/dgfcourier.de/) | 2026-08-18 | Online | — | 
[dhlde.wallbee.dk](https://phishdestroy.io/domain/dhlde.wallbee.dk/) | 2026-08-18 | Online | NHL DATA ApS | 
[digitech.pk](https://phishdestroy.io/domain/digitech.pk/) | 2026-08-12 | Online | — | 
[buyghar.com](https://phishdestroy.io/domain/buyghar.com/) | 2026-08-12 | Online | PublicDomainRegistry.com | 
[headshotsandcorporate.com](https://phishdestroy.io/domain/headshotsandcorporate.com/) | 2026-08-12 | Online | PublicDomainRegistry.com | 
[express-dhl-dpe3103d2mga.edgeone.dev](https://phishdestroy.io/domain/express-dhl-dpe3103d2mga.edgeone.dev/) | 2026-08-11 | Online | Tencent Cloud | 
[dhltools.se](https://phishdestroy.io/domain/dhltools.se/) | 2026-08-11 | Online | EPAG | 
[misilabario.cl](https://phishdestroy.io/domain/misilabario.cl/) | 2026-08-10 | Online | NIC Chile | 
[korea4u.taplink.kz](https://phishdestroy.io/domain/korea4u.taplink.kz/) | 2026-08-08 | Online | — | 
[random-chocolate-trkjykfk.edgeone.dev](https://phishdestroy.io/domain/random-chocolate-trkjykfk.edgeone.dev/) | 2026-08-06 | Online | Tencent Cloud | 
[allegrolokalnie.lokalna-1920088771.lol](https://phishdestroy.io/domain/allegrolokalnie.lokalna-1920088771.lol/) | 2026-08-06 | Offline | Global Domain | 
[flowsdghel.blinkusercontent.com](https://phishdestroy.io/domain/flowsdghel.blinkusercontent.com/) | 2026-08-06 | Offline | Cloudflare | 
[inquisitive-teal-omezr4ob.edgeone.dev](https://phishdestroy.io/domain/inquisitive-teal-omezr4ob.edgeone.dev/) | 2026-08-05 | Online | Tencent Cloud | 
[unaware-violet-zdvlmj66.edgeone.dev](https://phishdestroy.io/domain/unaware-violet-zdvlmj66.edgeone.dev/) | 2026-08-04 | Online | Tencent Cloud | 
[sominxdocuments.net](https://phishdestroy.io/domain/sominxdocuments.net/) | 2026-07-31 | Online | NICENIC | 

[All 209 Dhl reports](https://phishdestroy.io/domain/?brand=Dhl)

## Where they are registered and hosted

### Registrars

- [Gname.com](https://phishdestroy.io/registrar/name-com/)12
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)9
- [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)9
- Cloudflare8
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)8
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)7
- [Aceville](https://phishdestroy.io/registrar/aceville/)7
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)7

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)76
- [.app](https://phishdestroy.io/tld/app/)12
- [.cc](https://phishdestroy.io/tld/cc/)11
- [.io](https://phishdestroy.io/tld/io/)10
- [.cfd](https://phishdestroy.io/tld/cfd/)8
- [.dev](https://phishdestroy.io/tld/dev/)8
- [.org](https://phishdestroy.io/tld/org/)5
- [.net](https://phishdestroy.io/tld/net/)5

### Hosting networks

- CLOUDFLARENET, US26
- Cloudflare, Inc.16
- AS-COLOCROSSING, US14
- Tencent Building, Kejizhongyi Avenue11
- AMAZON-02 - Amazon.com, Inc., US10
- Amazon.com, Inc.9
- TENCENT-NET-AP-CN Tencent Building, Kejizhongyi 7
- FASTLY - Fastly, Inc., US7

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Dhl; share of all PhishDestroy reports: 0.09%.

Canonical: https://phishdestroy.io/brand/dhl/