purolator[.]parceln[.]vip

The domain purolator.parceln.vip is currently active and has been classified as a phishing threat with elevated risk as of July 29, 2026. Security analysis shows that 7 out of 91 security vendors on VirusTotal have flagged this domain as malicious, indicating a consensus among multiple detection engines regarding its fraudulent nature. Furthermore, the domain appears on one recognized security blocklist and is specifically blocked by PhishDestroy, adding further evidence to its malicious classification.

The domain was registered through Gname.com Pte. Ltd. on September 24, 2025. The registrar is commonly used for both legitimate and malicious registrations, so this fact alone is not determinative; however, the combination of multiple security flags and active blocklisting strongly suggests a threat posture. At this time, there are no details available regarding the website’s actual content, page title, or specific brand targeting beyond the implication of parcel notification in the hostname. There are no additional technical indicators such as hosting infrastructure, SSL information, or HTTP response data provided.

It is not clear what specific tactics or lures are used on this domain, as no content analysis or screenshots are available. Defenders should treat purolator.parceln.vip as a confirmed phishing threat based on the alignment of multiple independent detection sources and active blocklisting. Network defenders are advised to proactively block this domain, monitor for related activity in email and endpoint logs, and update security controls accordingly. Incident response teams should remain alert for user reports or evidence of credential harvesting attempts related to this domain. Continued monitoring for further intelligence is recommended to identify any evolving tactics or infrastructure changes associated with purolator.parceln.vip.