purolator[.]parcevx[.]vip

Analysis indicates that the domain purolator.parcevx.vip was registered through Gname.com Pte. Ltd. on September 29 2025. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy mitigation service. VirusTotal scans show that 12 out of 91 security vendors have flagged the domain as malicious, reinforcing its classification as a phishing resource.

The presence of multiple detections across independent scanners suggests that the site is being used to harvest credentials or otherwise deceive users, consistent with the generic phishing label supplied in the intelligence feed. No further technical details such as hosting IP address, TLS certificate information, or HTTP response codes have been published, leaving the underlying infrastructure opaque. Consequently, defenders cannot yet correlate the domain with specific payloads or victim targeting patterns beyond the generic phishing behavior.

Recommended actions include adding purolator.parcevx.vip to internal blocklists, ensuring that web filtering solutions reference the existing blocklist entry, and monitoring outbound traffic for connections to the domain’s resolved IPs once they become known. Incident response teams should also consider correlating any recent user reports of credential‑stealing emails that reference “Purolator” or similar courier branding with this domain, as the naming pattern may be intended to lure recipients. Continuous re‑evaluation is advised, as additional detections or threat‑intel updates may surface further indicators of compromise.