auth-dhl-shipping-eight[.]vercel[.]app

This domain, auth-dhl-shipping-eight.vercel.app, is identified as a delivery scam specifically targeting DHL customers. The threat type involves fraudulent parcel tracking or shipping notifications designed to steal credentials or financial information. As of the latest analysis, the domain remains active and operational, continuing to pose a risk to unsuspecting users. Infrastructure analysis reveals the domain was registered on May 27, 2026, through Vercel, a platform commonly used for hosting static sites and applications. It is currently flagged by 12 of 95 security vendors on VirusTotal, indicating broad detection across multiple threat intelligence sources. The domain appears on one security blocklist, further confirming its malicious nature. No legitimate association with DHL or its official services has been established, and the domain exhibits no trust indicators or historical legitimacy. The domain remains active, and users are advised to treat any communication or links associated with auth-dhl-shipping-eight.vercel.app as malicious. Organizations should update web filters and email security policies to block this domain and any subdomains or associated IP addresses. End users should avoid interacting with the site, refrain from entering credentials, and report any suspicious emails or messages claiming to originate from this domain. Monitoring for similar patterns, such as newly registered Vercel-hosted domains impersonating logistics brands, is recommended for proactive threat mitigation.