# DHL official website: the real address > DHL's real sign-in page is on www.dhl.com. How to tell a fake DHL link from the real one, with examples from 22 live phishing URLs. Canonical: https://www.phishclean.com/official-domains/dhl Last updated: 2026-11-09 DHL's real sign-in page is on www.dhl.com. If a link takes you anywhere else and asks for your DHL password, close it. We opened each address below on 9 November 2026. www.dhl.com Tracking and accounts start at www.dhl.com (dhl.de in Germany) ## Domains DHL uses Not a complete list. Each address below can have subdomains in front of it (`www.`, `login.`), and they are still DHL's. - `dhl.com` - `dhl.de` - `dpdhl.com` - `dhl-news.com` ## How to read the address Look at the part between `https://` and the first single `/`. Read it from the right. The real thing ends in `dhl.com` or another domain listed below, with nothing but a dot before it. - `https://login.dhl.com/…` is DHL: it ends in `.dhl.com`. - `https://dhl.com.account-check.example/…` is not: it ends in `account-check.example`, and DHL's name at the front is decoration. - `https://dhl-secure-login.example/…` is not: a hyphen makes a different domain, and anyone can register one. Everything after the first `/` is chosen by whoever made the page, so `…/dhl.com/signin` in the path proves nothing. ## What fake DHL pages looked like On 5 November 2026, PhishTank listed 22 live, verified phishing URLs that its volunteers labelled DHL. - **86.4%** used HTTPS. The padlock means the connection is encrypted, not that the site is DHL. - **9.1%** had "dhl" in the hostname. Most fakes give no such clue, so the absence of DHL's name doesn't make a link safe either. - **13.6%** sat on services anyone can sign up to, such as website builders, file sharing and QR-code links, rather than on a domain the attacker registered. Hostnames from the same list that use DHL's name without being DHL's, newest first. Dots are written as `[.]` so none of them is a working link. - dhl-deliveries-express[.]weebly[.]com - dhl[.]com-paiement[.]fr - dhl-expresss[.]weebly[.]com - sgin12-dhl[.]mdbgo[.]io ## Report a fake DHL email or page Send the suspicious email as an attachment to phishing-dpdhl@dhl.com. Some country pages give phishing@dhl.com instead. Source: [DHL: Fraud awareness](https://www.dhl.com/fraud), checked 9 November 2026. ## Lures to watch for - "Your parcel is held, pay a small fee" texts are the usual DHL lure. Track the parcel by typing dhl.com and entering the number yourself. - DHL says its email comes from dhl.com and its subdomains, dpdhl.com, dhl-news.com and country domains such as dhl.de, and warns that scammers can fake those sender addresses too. Not sure about a link? Paste it into the [free link checker](https://www.phishclean.com/check-link). It reads the address only and doesn't open the page. The [PhishClean browser extension](https://www.phishclean.com/) also checks each page you open for signs of a fake sign-in form. ## Questions ### What is DHL's official website? www.dhl.com (Tracking and accounts start at www.dhl.com (dhl.de in Germany)). A real DHL address ends in dhl.com, dhl.de, dpdhl.com or another domain the brand owns, read from the right of the hostname. ### How do I report a fake DHL email or website? Send the suspicious email as an attachment to phishing-dpdhl@dhl.com. Some country pages give phishing@dhl.com instead. ### Do fake DHL sites use DHL's name in the address? In PhishTank's list of live phishing URLs on 5 November 2026, 2 of the 22 URLs labelled DHL (9.1%) had the brand's name in the hostname, so most gave no such clue. 86.4% used HTTPS, so a padlock proves nothing. ## How we checked - **Sign-in addresses:** opened on 9 November 2026 and followed through every redirect to where the sign-in page loads. - **Phishing numbers:** [PhishTank](https://phishtank.org/)'s online-valid list, downloaded 5 November 2026. Only URLs its volunteers labelled DHL count, and many fakes are labelled "Other", so these are a sample. We didn't open any of them. Data shared under [CC BY-SA 2.5](https://creativecommons.org/licenses/by-sa/2.5/); method as in our [phishing URL statistics](https://www.phishclean.com/research/phishing-urls). - **Example hostnames:** hostnames in the whole list that contain "dhl" but aren't on DHL's domains, one per domain. See also: [official sign-in addresses of 15 brands](https://www.phishclean.com/official-domains). Last updated: 9 November 2026, when the sign-in addresses were checked.