dhlproductosyservicios[.]com

PhishDestroy identifies dhlproductosyservicios.com as an active phishing domain impersonating DHL delivery services to deceive users into sharing personal or financial information. This fraudulent site mimics legitimate DHL communications, using urgency—such as fake delivery notifications or shipment alerts—to trick victims into clicking malicious links or downloading harmful attachments. Users reaching this domain may be prompted to enter sensitive data like credit card numbers or login credentials under the guise of resolving a delivery issue. The threat is elevated due to its active operation and use of spoofed branding to exploit trust in well-known courier services. This domain was flagged by multiple security sources, including OISD and Hagezi blocklists, and is currently blocked by these services. Registered through Key-Systems GmbH on November 04, 2020, the domain resolves to IP address 208.97.181.79 and appears on 2 security blocklists. According to VirusTotal analysis, 2 out of 95 security vendors have detected this domain as malicious, while it retains a valid SSL certificate issued by Let's Encrypt. These indicators highlight its role in delivery scam campaigns targeting unsuspecting users. If you visited dhlproductosyservicios.com, immediately cease any interaction and avoid entering personal or financial details. Run a full antivirus scan on your device to detect potential malware. Do not reuse passwords associated with this domain. Report the site to your email provider and local cybercrime units. Monitor your financial statements for unauthorized transactions. For further investigation, consult the full report linked in this advisory.