purolator[.]parcevo[.]vip

Analysis of purolator.parcevo.vip, first observed on September 27 2025, indicates an active high‑risk generic phishing operation. The domain was registered through Gname.com Pte. Ltd. and has since been flagged by multiple security services. VirusTotal reports that 13 of 91 scanned security vendors identify the domain as malicious, demonstrating a moderate consensus of detection.

Google Safe Browsing classifies the site as a social engineering threat, and the domain appears on one external blocklist. PhishDestroy has also added the domain to its blocklist, confirming active mitigation by at least one anti‑phishing provider. The cumulative evidence suggests that the domain is being used to host phishing content, though the specific payload, page titles, or target brand have not been publicly disclosed.

Consequently, defenders should treat any traffic to purolator.parcevo.vip as hostile. Recommended actions include adding the domain to local deny lists, configuring network perimeter blocks, and monitoring for related indicators such as DNS queries or HTTP requests. Continuous re‑evaluation is advised, as additional detections or content analysis may surface further details about the infrastructure or the phishing kit employed.