GrizzlyGrizzly
Recent phishing
Phishing

Impersonating DHL

Intent: Data collection

  • Domain is not operated by DHL
  • DNS nameservers do not match DHL's known infrastructure
  • TLS certificate has no organization information
  • SPF record does not reference DHL's infrastructure

form requesting vehicle registration number to identify user for claim declaration

Scanned 82 days ago · Jul 10, 2026, 03:47 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: declaration.dhl.weproov.com — Grizzly