purolator[.]parcevg[.]vip

Analysis of purolator.parcevg.vip indicates an active generic phishing operation with an elevated risk rating. The domain was registered through Gname.com Pte. Ltd. on September 27, 2025, suggesting a relatively recent establishment that aligns with typical timelines for fast‑flux phishing infrastructure. VirusTotal scans show that 6 of 91 security vendors have flagged the domain, providing modest but consistent detection across multiple engines.

The domain also appears on a single security blocklist and is explicitly blocked by PhishDestroy, confirming that at least one dedicated anti‑phishing service has identified it as malicious. No additional intelligence—such as hosting IP addresses, SSL certificate details, or page‑title content—has been released, leaving the underlying hosting environment and delivery mechanisms unconfirmed. Defenders should prioritize immediate remediation by adding purolator.parcevg.vip to firewall deny lists, DNS sinkhole configurations, and endpoint protection exclusions.

Continuous monitoring of DNS queries for the domain is advised, as is periodic re‑evaluation of detection scores on VirusTotal and other aggregators, because additional vendor detections may emerge as the campaign evolves. Organizations should also consider reviewing email gateway logs for any inbound messages that reference the domain, given its phishing classification, and implement user awareness reminders about unsolicited communications that may direct recipients to this URL.