parceltracx[.]org

Analysis of parceltracx.org indicates a targeted brand impersonation campaign aimed at aliexpress. The domain was registered through NameCheap, Inc. on December 27, 2024 and currently resolves to the IPv4 address 198.12.80.250, which is associated with HostPapa in the United States under ASN 36352. No SSL certificate is present, leaving the HTTP service unencrypted. VirusTotal reports that 13 of 95 scanning engines flag the domain as malicious, reflecting a consensus among security vendors that the site hosts illicit content.

Gridinsoft assigns a trust score of 0 out of 100, reinforcing its reputation as unsafe. The page title retrieved from the live host reads "Package tracking with tracking number," consistent with the claim of providing parcel tracking services, a typical lure for aliexpress users. The domain is listed on at least one public security blocklist and has been actively blocked by the PhishDestroy mitigation platform. Current monitoring shows the site is offline, which limits direct observation of its payload, but the existing fingerprints suggest a classic credential‑harvesting or information‑gathering vector.

Defenders should add parceltracx.org to deny‑list rules across DNS filters, web proxies, and endpoint protection suites. Continuous observation of NameCheap‑registered domains that resolve to HostPapa AS36352 and exhibit similar page titles is recommended, as the infrastructure may be reused for future impersonation attempts. Organizations using aliexpress services should educate users about unsolicited tracking‑number requests and enforce multi‑factor authentication to mitigate credential compromise.