purolator[.]parcela[.]vip

The domain purolator.parcela.vip has been identified as a phishing infrastructure specifically designed to impersonate Purolator, a recognized logistics and parcel delivery service. This domain operates under the generic_phishing threat classification, targeting users through fraudulent parcel tracking interfaces to harvest credentials, payment details, and personal information. As of the latest assessment, the domain has been taken offline, though prior activity remains a documented risk. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was flagged by 9 of 95 security vendors on VirusTotal, indicating a consensus on its fraudulent nature. It was registered through Gname.com Pte. Ltd. and resolved to the IP address 43.133.145.195, a host commonly associated with transient phishing campaigns. The domain was created on June 12, 2026, suggesting a short-lived operational window typical of phishing sites. Additionally, it appears on one security blocklist, reinforcing its classification as a confirmed threat. Current status confirms the domain is offline, though residual risk remains for users who may have interacted with it during its active phase. Organizations and individuals are advised to review logs for connections to 43.133.145.195 and monitor for unauthorized access to logistics or financial accounts. Blocking the domain and its associated IP at perimeter defenses is recommended as a preventive measure. Users who entered credentials or payment information on this site should initiate password resets and enable multi-factor authentication on all critical accounts. Proactive monitoring of similar domains registered through Gname.com Pte. Ltd. is also advised to detect potential follow-up campaigns.