GLS phishing domains

Newly registered lookalikes - tracked daily

GLS phishing domains

Newly registered lookalikes - tracked daily

Tracked (7d)

New (24h)

vs avg

—

Website: gls-group.com
About: AIEuropean parcel-delivery lure - same 'redelivery fee' pattern as DHL / DPD, concentrated in GLS's core DE/IT/ES markets.
TLDs: .top (8) · .sbs (3) · .click (3)
Hosts: Tencent Building, Kejizhongyi Avenue (14) · ISP/IXP IN CAMBODIA WITH THE BEST VERVICE IN THERE. (2) · Cloudflare, Inc. (2)
Countries: Germany (9) · United States (5) · Japan (2)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Flags	Details
2026-09-11 13:38	2026-09-11 13:38	https://gls-grovup.biz		Details
2026-09-11 13:38	2026-09-11 13:38	https://gls-grouvp.club		Details
2026-09-11 13:38	2026-09-11 13:38	https://gls-group.space		Details
2026-09-11 13:38	2026-09-11 13:38	https://gls-group-informatione.top		Details
2026-09-11 13:38	2026-09-11 13:38	https://gls-group-informationd.top	GSB	Details
2026-09-11 13:38	2026-09-11 13:38	https://gls-grorp.mom	GSB	Details
2026-09-11 13:37	2026-09-11 13:37	https://gls-grorp.beauty	GSB	Details
2026-09-09 13:27	2026-09-09 13:27	https://glsgroupat.com		Details
2026-09-09 13:27	2026-09-09 13:27	https://gls-group-informationc.top	GSB	Details
2026-09-09 13:27	2026-09-09 13:27	https://gls-grouevp.sbs		Details
2026-09-08 13:17	2026-09-08 13:17	https://gls-grvoup.sbs	GSB	Details
2026-09-08 13:17	2026-09-08 13:17	https://gls-group-informationa.top	GSB	Details
2026-09-07 13:33	2026-09-07 13:33	https://glsgroup-pt.top		Details
2026-09-07 13:33	2026-09-07 13:33	https://gls-alicantecentro.com		Details
2026-09-05 13:50	2026-09-05 13:50	https://gls-grovup.click		Details
2026-09-05 13:49	2026-09-05 13:49	https://gls-grovop.click		Details
2026-09-05 13:47	2026-09-05 13:47	https://gls-group-information.top		Details
2026-09-05 13:47	2026-09-05 13:47	https://gls-grooup.top		Details
2026-09-04 13:27	2026-09-04 13:27	https://gls-grvuop.click		Details
2026-09-04 13:27	2026-09-04 13:27	https://gls-groupinformation.top	GSB	Details
2026-09-04 13:27	2026-09-04 13:27	https://gls-grouparo.sbs		Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL	Screenshot	Details
https://gls-grovup.biz		Details
https://gls-grouvp.club		Details
https://gls-group.space		Details
https://gls-group-information…		Details
https://gls-group-information… GSB		Details
https://gls-grorp.mom GSB		Details
https://gls-grorp.beauty GSB		Details
https://glsgroupat.com		Details
https://gls-group-information… GSB		Details
https://gls-grouevp.sbs		Details
https://gls-grvoup.sbs GSB		Details
https://gls-group-information… GSB		Details
https://glsgroup-pt.top		Details
https://gls-alicantecentro.com		Details
https://gls-grovup.click		Details
https://gls-grovop.click		Details
https://gls-group-information…		Details
https://gls-grooup.top		Details
https://gls-grvuop.click		Details
https://gls-groupinformation.… GSB		Details
https://gls-grouparo.sbs		Details

AIHow to verify a real GLS URL

Legitimate GLS URLs always end in gls-group.com (e.g. www.gls-group.com, account.gls-group.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not GLS.
The domains listed above were registered within the last 7 days. New-domain age is itself a signal — GLS has owned gls-group.com for years; brand-new look-alikes are almost never legitimate.
If you got the link from email, SMS, or social media, do not click it. Open gls-group.com from your browser bookmark or type the domain manually.
Real GLS pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.