purolator[.]parcevk[.]vip

The domain purolator.parcevk.vip was registered on September 29, 2025 through Gname.com Pte. Ltd. Since its creation, it has been observed on a single security blocklist and is actively blocked by PhishDestroy. Google Safe Browsing classifies the domain as a social‑engineering threat, indicating that it is being used to lure victims into credential‑stealing or fraudulent activities. VirusTotal analysis shows that 14 of 91 scanning engines have issued a detection, reinforcing the suspicion of malicious intent. The presence of multiple vendor detections and the Safe Browsing flag provide corroborating evidence that the site is being leveraged for phishing campaigns.

No public IP address, hosting provider, SSL certificate details, or HTTP response codes have been disclosed, leaving the underlying infrastructure opaque. Likewise, page‑title information, brand targeting, or specific phishing kit signatures have not been released, so the exact lure employed by the domain cannot be confirmed at this time. The limited visibility into the site’s content means that threat analysts must rely on the available external signals to assess risk. Given the high risk rating and active status, defensive teams should add purolator.parcevk.vip to domain‑blocking lists across perimeter and endpoint solutions.

Continuous monitoring of threat‑intel feeds for any new detections, blocklist entries, or changes in VirusTotal verdicts is recommended. Organizations using Google Safe Browsing or similar reputation services should ensure the domain is flagged as unsafe to prevent user access. Regular re‑evaluation of the domain’s classification is advised, as additional evidence may emerge that clarifies the phishing vector or reveals the hosting infrastructure.