dhlorg[.]us[.]cc

This domain, dhlorg.us.cc, is identified as a delivery scam phishing infrastructure designed to deceive users into disclosing sensitive information under the pretense of parcel tracking or shipping notifications. Analysis indicates the domain mimics legitimate logistics services, employing social engineering tactics to trick victims into entering credentials, payment details, or personal data on fraudulent web forms. The threat primarily targets individuals expecting package deliveries, exploiting trust in well-known courier brands to facilitate credential theft or financial fraud.

Infrastructure analysis reveals the domain was registered on June 12, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. As of the latest assessment, 7 out of 95 security vendors on VirusTotal flagged dhlorg.us.cc as malicious, while it appears on one security blocklist. The domain has since been taken offline, though its prior activity and registration details remain indicative of coordinated fraudulent operations.

Users who visited dhlorg.us.cc or interacted with any associated content should immediately revoke any entered credentials, particularly for financial or email accounts. Monitor linked accounts for unauthorized transactions or suspicious activity, and consider implementing multi-factor authentication where available. If payment details were submitted, notify relevant financial institutions to prevent fraudulent charges. Additionally, scan affected devices for malware, as phishing domains often redirect to exploit kits or download malicious payloads.