parimatch[.]to

The domain parimatch.to is currently flagged as an active generic phishing site designed to impersonate legitimate betting platforms. Analysis indicates this infrastructure is likely targeting users of the Parimatch brand, a well-known online gambling service, to harvest credentials or financial information. The domain remains operational and poses a high risk to visitors seeking legitimate betting services. Infrastructure analysis reveals the domain was registered on September 17, 2025, through the Government of the Kingdom of Tonga, an uncommon registrar for commercial entities. It resolves to the IP address 158.94.211.126, which has been associated with other suspicious domains in recent months. Detection metrics show that 3 of 95 security vendors on VirusTotal have flagged parimatch.to as malicious, a relatively low but notable detection rate that suggests emerging or evasive phishing tactics. No additional blocklist entries or trust scores from major threat intelligence platforms have been recorded at this time, though the domain's recent creation and limited detection history warrant caution. Current status confirms parimatch.to remains active and accessible, indicating the campaign is ongoing. Users are strongly advised to avoid interacting with this domain, particularly those attempting to access betting or gambling services. Organizations should consider implementing DNS-level blocking for 158.94.211.126 and monitoring for related domains registered through the same registrar. Endpoint protection systems should be updated to include this domain in phishing detection rules, and users should be educated on verifying domain authenticity before entering credentials or financial details.