DANGEROUS

Brand impersonation — not the real site

13 of 92 antivirus engines flag this page as malicious. This page is styled as a brand but is not the brand's real site. Go to the official site directly, and treat any download, login, or payment request here as unsafe.

Security Review

Is dhlservicepoint.rs legit or a scam?

Our verdict:Dangerous· 1/100

Fake DHL Serbia shipping site cloned from dhl.com and flagged as phishing by multiple engines with scam reports on record.

dhlservicepoint.rsScanned 12d ago
0
Trust score
DANGEROUS
Heuristics 0·MT 15
Category tags
phishing#Phishing#Clone Site90% MT confidence
Technical red flags (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
Engines flagged this URL
Domain Age
Registration date unknown
MT Intelligence
Dangerous
High likelihood · 90% confidence

MT Intelligence

Advanced threat intelligence
MT Security Analyst
High scam likelihoodengineMT · Guardiantrust15/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The page presents itself as an official DHL Service Point offering shipping quotes and drop-off locations in Serbia while loading DHL branding and external DHL domains. Our antivirus network detected 13 malicious flags with several engines specifically labeling it phishing. The site is explicitly identified as a clone of dhl.com and carries a 35/100 suspicion score from our fingerprinting. Independent reports from phishdestroy.io and AlienVault OTX confirm it as an active phishing domain, with three complaints also noted. No company registration or positive reviews exist to support legitimacy, and the domain shows no traffic ranking.
Full dossier
Analysis complete

Page Content

The site displays DHL Service Point branding with Serbian-language shipping tools, price calculators, location finders, and claims of 129 drop points in Serbia. It mimics official DHL Express pages but lacks any verifiable contact email.

Infrastructure

Hosted on IP 81.95.110.236 with clean abuse history and a valid Let's Encrypt certificate. External resources load from legitimate DHL domains alongside analytics and cookie services.

Domain History

WHOIS data unavailable and no business registration found. The domain is not indexed in global traffic rankings and shows no established online presence.

Web Reputation

Flagged by 13 of 92 engines including BitDefender, CyRadar, and alphaMountain.ai as phishing. Confirmed clone of dhl.com with active reports on phishdestroy.io and AlienVault OTX.

Risk Factors
5
  • 13 antivirus engines flag the site as malicious or phishing.
  • Explicitly identified as a clone of the official dhl.com domain.
  • Two independent reports label it an active phishing site targeting DHL users.
  • No business registration or verifiable company details found.
  • Three complaints recorded with zero positive reviews.
Positive Signals
3
  • Hosting IP shows zero abuse reports.
  • SSL certificate is valid though recently issued.
  • Browser blocklist feeds currently show clean status.
AI Recommendation
Do not use this site or enter any personal or payment information. Visit the official DHL website directly for shipping services.
Scam network detected
1 linked domain correlated

Evidence confirms this site is a clone of dhl.com.

dhl.com
Next-gen fraud intelligence
Evidence-backedCross-checked

Website Preview

Screenshot of dhlservicepoint.rs
LIVE RENDER
dhlservicepoint.rs

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for dhlservicepoint.rs, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Clones dhl.com
The page impersonates a well-known brand's site.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
2 scam reports · 3 complaints
Key findings
7 headline facts from open-web research
  • Domain dhlservicepoint.rs operates a site titled 'DHL SERVICEPOINT' offering international shipping quotes and drop-off points in Serbia.
  • Flagged as active phishing/wallet drainer impersonating DHL by phishdestroy.io (recent report).
  • Listed in AlienVault OTX with tags for phishing, crypto, and scam.
  • Similar domain dhlservicepoint.hr also flagged as delivery fraud/phishing by same source.
  • Official DHL Serbia uses dhl.com/rs-en and locator.dhl.com; no affiliation confirmed for .rs domain.
  • Site lists specific Serbian locations (e.g., Yield doo in Kragujevac) and pricing in RSD.
  • WHOIS reference exists but yields no public company registration data.
Scam reports (2)
Direct quotes from public scam databases, forums, and news.
  • phishdestroy.ioopen

    "The domain dhlservicepoint[.]rs has been identified as a phishing website designed to impersonate DHL . This malicious site targets ..."

  • AlienVault OTXopen

    "phishing ,. crypto ,. scam ... dhlservicepoint.rs / Content Security Policy: upgrade insecure requests ... PhishDestroy — Active Phishing & Crypto Scam Domains."

Impersonation / typosquat
Clone of dhl.com

Website uses DHL branding, ServicePoint terminology, Serbia shipping services, and mimics official DHL Express pages.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

phishdestroy.io reports the domain as an active phishing site impersonating DHL. AlienVault OTX lists it with phishing, crypto, and scam tags. Three complaints were found alongside zero positive reviews or business registrations.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (1)
  • Evidence confirms this site is a clone of dhl.com.
Linked signals (1)
Clone of dhl.com

Antivirus Engines

Detection matrix · live
13 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

13Malicious0Suspicious50Harmless92Engines
0
of 92
ADMINUSLabs
Malicious· malicious
alphaMountain.ai
Malicious· phishing
BitDefender
Malicious· phishing
Chong Lua Dao
Malicious· malicious
Criminal IP
Malicious· phishing
CyRadar
Malicious· phishing
Fortinet
Malicious· phishing
G-Data
Malicious· phishing
Lionic
Malicious· phishing
SOCRadar
Malicious· malware
Sophos
Malicious· phishing
VIPRE
Malicious· phishing
Webroot
Malicious· malicious

13 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbers+381 11 3105500
Postal addressPresent
Linked social profiles2
Signal Summary
Contact details look reasonable
  • No contact email found anywhere on the page.
  • Phone number listed (+381 11 3105500).
  • Postal address visible on the page.
  • Links to 2 social profiles.

Domain & Encryption

Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · R12
ExpiresJul 11, 2026 (47d)
Self-signedNo
Hosting & Technology
HostingACTIVE 24 network
Server locationCZ

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPACTIVE 24 network
Usage typeData Center/Web Hosting/Transit

Scam-Type Likelihood

2 scam-type patterns detected
Scam-Type Likelihood

0 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Brand Impersonation
Brand Impersonation
Moderate likelihood
0/100
  • AI analyst tagged this as a brand / clone-site impersonation.
  • Clustered with known brand-impersonation infrastructure.
Phishing
Low-level signals
0/100
  • AI analyst tagged this as phishing.

Brand impersonation detected

This page is styled as a known brand but is not the brand's real site.

  • Do not interact with dhlservicepoint.rs

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Go to the brand's real site directly

    Type the brand name into a search engine or open it from your bookmarks — don't use links from emails, SMS, ads, or social posts, which are the delivery vectors for impersonation.

  • Never download or sign in here

    Even if the page "just" offers a download or a giveaway, impersonation pages frequently deliver malware or set up follow-up phishing. Assume anything accepted from this site is hostile.

  • Report the impersonation to the brand

    Most major brands have a dedicated abuse or anti-phishing reporting channel — reporting helps them take the site down and protects other users.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

  • Our automated security review flags dhlservicepoint.rs as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Final Verdict

0
Trust / 100
Final Verdict·dhlservicepoint.rs
DANGEROUS

This site is a fake DHL shipping portal impersonating the real courier. Multiple security engines flag it as phishing and it is confirmed as a clone of dhl.com with no legitimate business registration. Avoid entering any details and use the official DHL site instead.

Do not use this site or enter any personal or payment information. Visit the official DHL website directly for shipping services.

AV engines
92
MT passes
2
Net signals
1
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
Scanned by
JackStaff
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.