Verdict
dhl-event.app shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | DHL Global Event Logistics marketing page describing services, shipment transparency via an app, event calendar and contact details, and links to register or request an account. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 16 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Listed as unsafeGoogle | Risk |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 4.8 years oldRegistered history | Clear |
| Web archive | Archived since 2021Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2021.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website presents itself as DHL Global Event Logistics, a corporate event-logistics service intended to arrange freight movements and related customer support for business customers.
Scam/Impersonation Risk
Contradictory threat signals were observed despite the page’s conventional corporate presentation. External sources identify the domain as malicious and blacklisted, including a Google Safe Browsing match and corroborating detections from multiple security providers. The homepage itself describes shipment transparency, an event calendar, and registration or account-request pathways; those features create a sensitive interaction surface even though the page-level review found no explicit phishing form, malicious financial solicitation, or brand-impersonation indicator. No distinct legal-entity name conflict was observed, but the external threat evidence is sufficient to make login, credential submission, and other sensitive interaction inappropriate pending independent confirmation.
- The homepage presents DHL Global Event Logistics services and directs visitors toward shipment-status access, event information, registration, and account requests.
- Google Safe Browsing reports a malicious match, and the domain is identified as blacklisted by Google Safe Browsing, VirusTotal, and an external blacklist source.
- Security evaluation recorded 16 malicious and 2 suspicious detections, with Google, Kaspersky, and Sophos among the flagged providers.
- The domain was registered on 2021-10-13 and is approximately 4.85 years old through united-domains AG; archived coverage records 41 snapshots spanning 2021–2026.
Regulatory Verification Notes
The legal notice identifies “DHL Trade Fairs & Events GmbH” and the site presents a corporate logistics business model rather than a regulated financial service. That on-site identity claim is not independently verified by the available evidence, and the site does not provide a license or registration number; this is a disclosure gap requiring direct confirmation rather than a standalone finding of fraud. The available third-party broker context contains no match, but it does not establish licensing, corporate control, or authorization.
- The homepage includes a legal-notice link and identifies DHL Trade Fairs & Events GmbH in its copyright statement.
- No license claim, licensing authority, or registration number is presented in the supplied site analysis.
- The site’s transport encryption uses a DV certificate issued by YE1, valid through 2026-10-20.
What to Verify Next
Before any sensitive interaction, the claimed DHL affiliation and the legitimacy of the account pathway should be confirmed through an independently sourced DHL corporate channel, not through contact details or navigation supplied by the site. Any licensing or corporate-registration assertion relevant to the proposed service should be checked against the applicable official registry, and payment or credential activity should remain suspended until those checks are complete.
- Independent confirmation is warranted because the website’s real-world operator identity remains unverified.
- Registry confirmation is warranted because the site does not state a licensing authority or registration number.
- Account-access legitimacy should be confirmed through a separately sourced corporate route before credentials are submitted.
Summary Verdict
The website carries a critical trust posture with material sensitive-interaction risk. Its corporate appearance and coherent service description do not overcome the corroborated external threat indicators, so the site should not be treated as an established or independently verified DHL service endpoint.
Infrastructure Integrity
The site is protected by a CDN/WAF layer, which provides some defensive separation but is only a mitigating technical control and does not establish legitimacy. The observed edge infrastructure is associated with DigitalOcean, and the origin server was not observable in this analysis.
- Served from AS14061, DIGITALOCEAN-ASN — DigitalOcean, LLC, US; observed edge IP: 138.68.124.213.
- CDN/WAF protection is present, with 1 observed edge IP and 0 identified origin candidates.
- The hosting registry is ARIN and the hosting country is the US.
Closing Assessment
Sensitive actions should remain suspended until the operator and access pathway have been independently confirmed through trusted corporate channels. Read-only observation is the proportionate interim posture.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of dhl-event.app.
- The request stayed on dhl-event.app. It was not redirected to another domain. Clear
- Registration is published under united-domains AG. Clear
- DNS for this domain is served by udag.de, across 3 name servers. Noted
- The registration is paid up to 2026-10-13. Noted
- The earliest public archive of this site is from 2021-12-01. Clear
- It is hosted on DIGITALOCEAN-ASN, from a server in US. Noted
Domain intelligence
| Registrar | united-domains AG |
|---|---|
| Hosting | DIGITALOCEAN-ASN - DigitalOcean, LLC, US |
| Country | US |
| Server IP | 138.68.124.213 |
| Name servers | ns.udag.de, ns.udag.net, ns.udag.org |
| SSL issuer | YE1 |
| SSL expiry | 2026-10-20 |
| Domain age | 4.85 years (continuous registration) |
| Domain expiry | 2026-10-13 |
| Archive first seen | 2021-12-01 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 16 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 1 match |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about dhl-event.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.