GLS phishing domains

Newly registered lookalikes - tracked daily

GLS phishing domains

Newly registered lookalikes - tracked daily

Tracked (7d)

New (24h)

vs avg

—

Website: gls-group.com
About: AIEuropean parcel-delivery lure - same 'redelivery fee' pattern as DHL / DPD, concentrated in GLS's core DE/IT/ES markets.
TLDs: .cfd (8) · .com (3) · .online (2)
Hosts: Cloudflare, Inc. (6) · Tencent Building, Kejizhongyi Avenue (4) · cognetcloud INC (1)
Countries: United States (7) · Singapore (3) · Hong Kong (1)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Flags	Details
2026-09-01 13:17	2026-09-01 13:17	https://gls-gruoep.cfd		Details
2026-09-01 13:17	2026-09-01 13:17	https://gls-grevop.cfd	GSB	Details
2026-08-29 13:41	2026-08-29 13:41	https://gls-grouppost.online		Details
2026-08-28 13:36	2026-08-28 13:36	https://gls-wx.com		Details
2026-08-28 13:36	2026-08-28 13:36	https://gls-growup.cfd		Details
2026-08-28 13:36	2026-08-28 13:36	https://gls-grovup.ink	GSB	Details
2026-08-28 13:36	2026-08-28 13:36	https://gls-grovop.cfd		Details
2026-08-28 13:36	2026-08-28 13:36	https://gls-groevp.cfd		Details
2026-08-28 13:36	2026-08-28 13:36	https://gls-groeap.cfd		Details
2026-08-27 01:26	2026-08-27 01:26	https://gls-paket.online		Details
2026-08-27 01:26	2026-08-27 01:26	https://gls-hr.com		Details
2026-08-27 01:26	2026-08-27 01:26	https://gls-guinee.com		Details
2026-08-27 01:26	2026-08-27 01:26	https://gls-groupdhjscom.top		Details
2026-08-27 01:26	2026-08-27 01:26	https://gls-group-niuhao.mom		Details
2026-08-27 01:26	2026-08-27 01:26	https://gls-grouazp.cfd	GSB	Details
2026-08-27 01:26	2026-08-27 01:26	https://gls-grouanup.cfd	GSB	Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL	Screenshot	Details
https://gls-gruoep.cfd		Details
https://gls-grevop.cfd GSB		Details
https://gls-grouppost.online		Details
https://gls-wx.com		Details
https://gls-growup.cfd		Details
https://gls-grovup.ink GSB		Details
https://gls-grovop.cfd		Details
https://gls-groevp.cfd		Details
https://gls-groeap.cfd		Details
https://gls-paket.online		Details
https://gls-hr.com		Details
https://gls-guinee.com		Details
https://gls-groupdhjscom.top		Details
https://gls-group-niuhao.mom		Details
https://gls-grouazp.cfd GSB		Details
https://gls-grouanup.cfd GSB		Details

AIHow to verify a real GLS URL

Legitimate GLS URLs always end in gls-group.com (e.g. www.gls-group.com, account.gls-group.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not GLS.
The domains listed above were registered within the last 7 days. New-domain age is itself a signal — GLS has owned gls-group.com for years; brand-new look-alikes are almost never legitimate.
If you got the link from email, SMS, or social media, do not click it. Open gls-group.com from your browser bookmark or type the domain manually.
Real GLS pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.