DHL official website: the real address

DHL's real sign-in page is on www.dhl.com. If a link takes you anywhere else and asks for your DHL password, close it. We opened each address below on 9 November 2026.

Domains DHL uses

Not a complete list. Each address below can have subdomains in front of it (www., login.), and they are still DHL's.

• dhl.com
• dhl.de
• dpdhl.com
• dhl-news.com

How to read the address

Look at the part between https:// and the first single /. Read it from the right. The real thing ends in dhl.com or another domain listed below, with nothing but a dot before it.

• https://login.dhl.com/… is DHL: it ends in .dhl.com.
• https://dhl.com.account-check.example/… is not: it ends in account-check.example, and DHL's name at the front is decoration.
• https://dhl-secure-login.example/… is not: a hyphen makes a different domain, and anyone can register one.

Everything after the first / is chosen by whoever made the page, so …/dhl.com/signin in the path proves nothing.

What fake DHL pages looked like

On 5 November 2026, PhishTank listed 22 live, verified phishing URLs that its volunteers labelled DHL.

• 86.4% used HTTPS. The padlock means the connection is encrypted, not that the site is DHL.
• 9.1% had "dhl" in the hostname. Most fakes give no such clue, so the absence of DHL's name doesn't make a link safe either.
• 13.6% sat on services anyone can sign up to, such as website builders, file sharing and QR-code links, rather than on a domain the attacker registered.

Hostnames from the same list that use DHL's name without being DHL's, newest first. Dots are written as [.] so none of them is a working link.

• dhl-deliveries-express[.]weebly[.]com
• dhl[.]com-paiement[.]fr
• dhl-expresss[.]weebly[.]com
• sgin12-dhl[.]mdbgo[.]io

Report a fake DHL email or page

Send the suspicious email as an attachment to phishing-dpdhl@dhl.com. Some country pages give phishing@dhl.com instead.

Source: DHL: Fraud awareness, checked 9 November 2026.

Lures to watch for

• "Your parcel is held, pay a small fee" texts are the usual DHL lure. Track the parcel by typing dhl.com and entering the number yourself.
• DHL says its email comes from dhl.com and its subdomains, dpdhl.com, dhl-news.com and country domains such as dhl.de, and warns that scammers can fake those sender addresses too.

Questions

What is DHL's official website?

www.dhl.com (Tracking and accounts start at www.dhl.com (dhl.de in Germany)). A real DHL address ends in dhl.com, dhl.de, dpdhl.com or another domain the brand owns, read from the right of the hostname.

How do I report a fake DHL email or website?

Send the suspicious email as an attachment to phishing-dpdhl@dhl.com. Some country pages give phishing@dhl.com instead.

Do fake DHL sites use DHL's name in the address?

In PhishTank's list of live phishing URLs on 5 November 2026, 2 of the 22 URLs labelled DHL (9.1%) had the brand's name in the hostname, so most gave no such clue. 86.4% used HTTPS, so a padlock proves nothing.

How we checked

• Sign-in addresses: opened on 9 November 2026 and followed through every redirect to where the sign-in page loads.
• Phishing numbers: PhishTank's online-valid list, downloaded 5 November 2026. Only URLs its volunteers labelled DHL count, and many fakes are labelled "Other", so these are a sample. We didn't open any of them. Data shared under CC BY-SA 2.5; method as in our phishing URL statistics.
• Example hostnames: hostnames in the whole list that contain "dhl" but aren't on DHL's domains, one per domain.

See also: official sign-in addresses of 15 brands.

Last updated: 9 November 2026, when the sign-in addresses were checked.