parcelpowered[.]club

Analysis of parcelpowered.club indicates a confirmed phishing domain targeting courier or parcel delivery services, currently offline as of July 24, 2026. The domain was registered on February 12, 2026, through NameCheap, Inc., and uses Cloudflare nameservers (hank.ns.cloudflare.com, shaz.ns.cloudflare.com), a common infrastructure choice for threat actors seeking anonymity and DDoS protection. It resolves to an IPv6 address (2606:4700:3035::6815:40d7) hosted on Cloudflare’s network (AS13335), further obscuring the true origin of the malicious content. The SSL certificate is issued by Cloudflare’s WE1 authority, which does not inherently indicate malicious activity but is frequently leveraged by phishing sites to appear legitimate. The page title, 'Just a moment...', suggests the domain was either caught in a Cloudflare security challenge or was in the process of loading a phishing kit when accessed.

No specific brand or kit details are available in the provided data, though the domain name implies a focus on parcel or delivery scams. Security vendor detections are notable: 15 of 93 engines on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist. Gridinsoft assigns a trust score of 0/100, reinforcing its classification as high-risk. AlienVault OTX includes the domain in a threat intelligence pulse, indicating prior reporting by security researchers. The domain was blocked by PhishDestroy, a specialized anti-phishing service, confirming its role in phishing campaigns.

Defenders should treat this domain as compromised and avoid any interaction. Network-level blocks at the DNS or IP level are recommended, particularly for organizations in logistics, e-commerce, or customer service sectors, which are common targets of parcel-themed phishing. Given the domain’s use of Cloudflare, further investigation into associated IP ranges or SSL certificates may reveal additional linked infrastructure.