tr[.]parmabet-girmek[.]cam

Analysis of tr.parmabet-girmek.cam shows a newly registered domain created on 15 July 2026 and hosted via NameCheap, Inc. The domain resolves to the IPv4 address 188.114.96.3 and is delegated to Cloudflare nameservers audrey.ns.cloudflare.com and peter.ns.cloudflare.com. VirusTotal records indicate that the domain has been scanned by 91 security vendors, none of which have raised a detection; this lack of alerts does not constitute evidence of benign intent. The assigned classification is generic_phishing, implying an intent to harvest credentials or personal data. No additional intelligence such as page content, associated malware kits, or victim reports is currently available, leaving the full scope of the campaign uncertain. The short registration window and use of Cloudflare DNS are tactics commonly observed in phishing infrastructure, but without a captured payload or landing page the operator’s targeting and technique remain unknown. Defenders should add the domain to outbound filtering rules, monitor DNS queries for the 188.114.96.3 address, log any authentication attempts directed at the domain, and consider redirecting users to a safe‑browsing warning. Continuous re‑evaluation is recommended as new observations emerge.