DHL phishing & impersonation
Shippingdhl.com
21
Impersonation sightings
9
Distinct hosts
2026-10-09
Last detected
3
Official domains
ScanMalware watches every scanned site for signs it is impersonating DHL — the brand name in the page title or screenshot text, the brand's logo/favicon on a non-official host, and our AI analysis naming the brand. A match on a host outside DHL's official domains is recorded below.
Official domains
dhl.comdhl.dedpdhl.com
Also known as
dhl expressdhl airdhl global maildhl freightdhl airwaysdhl worldwidedhl rápidodhl global
Sites impersonating DHL
9 hosts · repeat scans of the same host are grouped
| Site | Verdicts | Last seen | Actions |
|---|---|---|---|
| block-orcin-alpha.vercel.app DHL Express | RulesLow RiskAIHigh Risk | 2026-10-09 seen 5× | View scan → |
| sessionid089-dhlgateway.firebaseapp.com Track Your Shipment | RulesHigh RiskAIModerate Risk | 2026-10-05 seen 2× | View scan → |
| sessionid089-dhlgateway.web.app Track Your Shipment | RulesHigh RiskAIHigh Risk | 2026-10-05 seen 2× | View scan → |
| ofornaogu-dpzv6dife1hh.edgeone.dev DHL EXpress | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-09-27 seen 2× | View scan → |
| dhl-express-dev.firebaseapp.com DHL Aviation | RulesMaliciousAIConfirmed Scam | 2026-09-22 seen 2× | View scan → |
| express-dhl-dpe3103d2mga.edgeone.dev DHL EXpress | RulesHigh RiskAIHigh Risk Possible Shopify Phishing on cloud hosting | 2026-08-11 | View scan → |
| unaware-violet-zdvlmj66.edgeone.dev DHL | RulesLow RiskAIConfirmed Scam | 2026-08-04 | View scan → |
| confirm-address-changing.vercel.app DHL Express | GERMANY | RulesLow RiskAIModerate Risk | 2026-07-09 seen 5× | View scan → |
| dhl-grjsdslhuxzsqtywukviruqw.pages.dev DHL Home – Globale Logistik und internationaler Versand Deutschland | RulesMaliciousAIHigh Risk Known Kit: Multi-Brand pages.dev Phish Kit — js1.js (universal kit-internal) (multibrand-pagesdev-phish) | 2026-06-21 | View scan → |
2 further hosts are not listed: the DHL name appeared on them, but both our rule engine and our AI analysis rated the page harmless, so we do not publish them as impersonation.