DHL phishing & impersonation
Shippingdhl.com
27
Sites impersonating it
19
New in the last 30 days
2
Campaigns
2026-11-14
Last detected
2026-08-172026-11-14
Where these sites are hosted
14 on free hosting platforms, 13 on 9 registered domains
firebaseapp.com · 3vercel.app · 2web.app · 2heteml.net · 2netlify.app · 1cloudfront.net · 1.dev · 4.com · 4.ar · 1.live · 1.com.ve · 1.help · 1
Campaigns
Phishing kits we track as hunts, and how many of the sites below each one covers. A site can belong to more than one.
4 of 27 sites · last 2026-11-11
1 of 27 site · last 2026-06-21
1 related hunt
Official domains
dhl.comdhl.dedpdhl.com
A match on a host outside these domains is recorded as impersonation. We look for the brand name in the address, page title and screenshot, its logo on a non-official site, and our AI analysis naming it.
Also known as
dhl expressdhl airdhl global maildhl freightdhl airwaysdhl worldwidedhl rápidodhl global
Sites impersonating DHL
27 of 27 sites · newest first · repeat scans of a site are grouped
1 lower-risk copy is not shown: sites that use the DHL name or design, but that neither our rule engine nor our AI analysis rates high risk (for example harmless copies of the brand's own pages). Show them
RulesMaliciousAIHigh Risk“DHL” in the page titlePage text
RulesLow RiskAIHigh RiskIdentified as DHL by our AI analysisAI analysis
RulesMaliciousAIConfirmed ScamKnown Kit: Firebase Hosting redirect pages into Codeanywhere containers: bank, post, customs and tax phishing across Europe (firebase-codeanywhere-redirect-2026-11)Identified as DHL by our AI analysisAI analysis
RulesHigh RiskAIConfirmed Scam“DHL” in the page titlePage text
RulesHigh RiskAIHigh RiskIdentified as DHL by our AI analysisAI analysis
RulesHigh RiskAIHigh RiskIdentified as DHL by our AI analysisAI analysis
RulesHigh RiskAIHigh Risk“DHL” in the hostnameAI analysis
RulesLow RiskAIConfirmed Scam“DHL” in the page titleAI analysis
RulesLow RiskAIHigh RiskIdentified as DHL by our AI analysisAI analysis
RulesHigh RiskAIConfirmed ScamPhishing kit victim-token in URL“DHL” in page or screenshot textScreenshot text
RulesMaliciousAIConfirmed Scam“DHL” in the hostnameLogo / faviconPage text
RulesHigh RiskAIConfirmed Scam“DHL” in the page titlePage text
RulesLow RiskAIHigh RiskIdentified as DHL by our AI analysisAI analysis
RulesMaliciousAIConfirmed ScamKnown Kit: Firebase Hosting redirect pages into Codeanywhere containers: bank, post, customs and tax phishing across Europe (firebase-codeanywhere-redirect-2026-11)Identified as DHL by our AI analysisAI analysis
RulesMaliciousAIHigh RiskKnown Kit: Firebase Hosting redirect pages into Codeanywhere containers: bank, post, customs and tax phishing across Europe (firebase-codeanywhere-redirect-2026-11)Identified as DHL by our AI analysisAI analysis
RulesMaliciousAIConfirmed ScamKnown Kit: Firebase Hosting redirect pages into Codeanywhere containers: bank, post, customs and tax phishing across Europe (firebase-codeanywhere-redirect-2026-11)Identified as DHL by our AI analysisAI analysis
RulesLow RiskAIHigh Risk“DHL” in the page titleAI analysisPage text
RulesMaliciousAIConfirmed Scam“DHL” in the page titleAI analysisPage text
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“DHL” in the page titlePage text
RulesMaliciousAIConfirmed Scam“DHL” in the hostnameAI analysis
RulesMaliciousAIConfirmed Scam“DHL” in the page titlePage text
RulesLow RiskAIHigh Risk“DHL” in the page titleAI analysis
RulesHigh RiskAIHigh RiskCredential Phishing on disposable hosting“DHL” in the page titlePage text
RulesMaliciousAIConfirmed Scam“DHL” in the hostnameAI analysisLogo / favicon
RulesHigh RiskAIHigh RiskPossible Shopify Phishing on cloud hosting“DHL” in the hostnamePage text
RulesLow RiskAIConfirmed Scam“DHL” in the page titlePage text
dhl-grjsdslhuxzsqtywukviruqw.pages. dev DHL Home – Globale Logistik und internationaler Versand Deutschland2026-06-21RulesMaliciousAIHigh RiskKnown Kit: Multi-Brand pages.dev Phish Kit — js1.js (universal kit-internal) (multibrand-pagesdev-phish)“DHL” in the hostnameLogo / favicon
2 further sites are not listed at all: the DHL name appeared on them, but we judged them not to be impersonation (both our rule engine and our AI analysis rated the page harmless, the page only mentions the brand, or it is a copy of another public website).