purolator[.]parcezb[.]vip

The domain purolator.parcezb.vip was registered through Gname.com Pte. Ltd. on 25 September 2025. As of the report date (29 July 2026) the domain remains active and is classified with an elevated risk level. Independent threat‑intelligence feeds have placed the domain on a security blocklist and PhishDestroy has issued a block, indicating that it is being used for malicious purposes.

VirusTotal analysis shows that eight of ninety‑one security vendors have flagged the domain, a detection ratio that further supports a malicious classification. The available intelligence does not disclose hosting IP addresses, SSL certificate details, or the exact page title displayed by the site, so those aspects of the infrastructure cannot be verified at this time. Nonetheless, the combination of registrar information, blocklist inclusion, and multi‑engine detections provides concrete evidence that the domain is associated with a generic phishing campaign.

Defenders should treat any traffic to purolator.parcezb.vip as hostile. Recommended mitigations include adding the domain to network‑level URL filtering, updating DNS block lists, monitoring for outbound connections to the domain, and investigating any internal logs that reference the domain. Continuous re‑evaluation is advised because additional indicators such as hosting infrastructure or payload characteristics may emerge as the campaign evolves.