PhishStats detects French parcel 'livraison' phishing page on p581488.pro
PhishStats detected a phishing URL on p581488.pro whose path uses the French words 'suivi' and 'livraison', consistent with a fake parcel-tracking page.
- First reported
- Reports
- 1
Source: x.com · published
What happened
Phishing feed PhishStats posted on October 15, 2026 a newly detected phishing URL at hxxps://p581488[.]pro/suivi/32288768/livraison, hosted at 104.21.43.206 on Cloudflare (AS13335). The linked PhishStats phishing report lists the URL with a detection date of 2026-10-15. The URL path uses the French words 'suivi' (tracking) and 'livraison' (delivery), consistent with a parcel-tracking lure.
How the scam works
Parcel-tracking lures usually arrive as a text or email saying a delivery is pending or failed, with a link to 'track' it or pay a small redelivery fee. The page then asks for personal and card details.
Note: PhishStats' post is an automated detection and does not say which carrier is imitated or how the link was spread; this section describes the general pattern of delivery phishing.
Source
PhishStats on X (@PhishStats), post of October 15, 2026, and the linked PhishStats report.
Red flags
- A delivery text or email you weren't expecting, with a link to track or pay.
- A tracking page on a random domain rather than the carrier's own site.
- Requests for card details to release a parcel.
If you were targeted
- 1Don't open the link or enter personal or payment details on p581488.pro.
- 2Check deliveries only on the carrier's official site or app, using a tracking number from the seller.
- 3If you entered card details, contact your bank immediately.