purolator[.]parceli[.]vip

Analysis of purolator.parceli.vip shows a recent malicious registration and active abuse. The domain was created on 24 September 2025 and is registered through Gname.com Pte. Ltd., a registrar often leveraged for short‑lived malicious infrastructure. Independent threat‑intelligence feeds have already flagged the site; PhishDestroy has placed it on its blocklist, and it appears on an additional security blocklist, indicating that at least one external source is actively denying access.

VirusTotal scans reveal that 7 of 91 security vendors have raised detections against the domain, demonstrating a modest but non‑trivial consensus of malicious behavior. No public evidence is available regarding the hosting IP, SSL certificate details, HTTP response codes, or page title, leaving those aspects unverified at this time. The current evidence is sufficient to classify the domain as a confirmed phishing resource targeting users who may be expecting legitimate communications from a courier service.

Defenders should immediately add purolator.parceli.vip to DNS‑based and proxy‑based blocklists, enforce URL filtering rules that deny outbound connections to the domain, and monitor network traffic for any attempted resolutions or HTTP requests. Continuous re‑evaluation is advised, as additional telemetry such as hosting location, certificate fingerprints, or observed payloads may emerge and refine the threat profile.