parcbanana[.]com

This domain, parcbanana.com, is identified as a fraudulent token claim portal designed to steal cryptocurrency credentials. Analysis indicates the site impersonates the Pixel Ape Rowboat Club, luring victims with a fake $PARC token claim interface. The threat type is classified as a crypto drainer scam, where users are tricked into connecting wallets to malicious smart contracts, resulting in unauthorized fund transfers. Infrastructure analysis reveals the domain was registered on June 5, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, an uncommon registrar for legitimate projects. It resolves to IP address 172.67.140.120, a Cloudflare-protected endpoint, and is flagged by 10 out of 95 security vendors on VirusTotal. The domain appears on two security blocklists and is actively blocked by multiple threat intelligence feeds. The SSL certificate is issued by Google Trust Services, providing a false sense of security. Technologies detected include HSTS and HTTP/3, typical of modern phishing infrastructure. As of the latest assessment, parcbanana.com remains active and unmitigated. No takedown actions have been observed, and the site continues to resolve. Users are advised to avoid interaction, revoke any connected wallet permissions, and report the domain to their security providers. The elevated risk level persists due to the domain's operational status and the targeted nature of the scam, which specifically exploits holders of the $PARC token.