False positive - huolinta.dhlexpress.fi

[Substr]

Hi,

I'm getting a "Website blocked due to reputation" page for the huolinta.dhlexpress.fi domain which is a Finnish-specific domain for the DHL courier company, is this a false positive?

[gonzo]

Sucuri has blacklisted that website, but does not specify the reason.  Here is their somewhat vague report:

https://sitecheck.sucuri.net/results/huolinta.dhlexpress.fi

In addition, DHL Express runs most if not all operations from website dhl.com, including its Finnish operations.  This leads me to question the legitimacy of the site you mentioned.  In lieu of more conclusive information, I think the block must stand.

[Substr]

Hi,

Thanks for the reply, but I'm quite certain the dhlexpress.fi domain is legitimate, even if it's not often used. You can see the base domain redirects to their own website at https://mydhl.express.dhl/fi/fi/home.html which is also the page you end up at if you visit https://www.dhl.com/fi-en/home.html and scroll down and click "DHL Express".

Additionally, the reason I initially posted this was due to getting a confirmed real text message from DHL for me to enter customs information for an expected shipment, and the specific link they used was located at the huolinta.dhlexpress.fi subdomain. The message also contained my specific order id which is confirmed real, as well as contact number and email for DHL - the email address being "blocked@dhl.com". This was certainly not a fraudulent or phishing message I received.

 

 

Edited May 7, 2021 by gonzo
keep real user email out of conversation

[gonzo]

The site has been whitelisted. Please allow 15-30 minutes for changes to take effect. Sorry for the inconvenience.

These are extremely difficult to determine, and I still am hesitant.  I am only whitelisting this because you have received enough information via multiple sources to give you a high comfort level.

[Substr]

Thanks, I'll also send an email to the provided dhl.com email address just to get extra confirmation that the url is legitimate, would you want that forwarded on anywhere if I receive a reply?

[gonzo]

Send to me via direct message here on the forums.  I don't want the sender's (or your) contact information in the wild.