parliament[.]rodeo

parliament.rodeo is an active domain observed on July 12, 2026 delivering a generic phishing campaign. The site was registered on March 11, 2026 through a well‑known registrar and currently resolves to a single IPv4 address. The hosting provider is identified as Ultahost, Inc., operating under ASN 214036 and located in the Netherlands. Network resolution shows the domain pointing to 192.142.10.5, with authoritative name servers ns1‑ns4.ultahost.com. Email routing is configured with an MX record pointing to the domain itself at priority 0. The web service returns HTTP 200 and serves a TLS certificate issued by a widely used free certificate authority, indicating encrypted communications. Content analysis reveals a page title entirely in Japanese that advertises instant loans without credit checks, a typical lure for phishing victims seeking financial services. The site has been listed on a security blocklist and is flagged by PhishDestroy. Independent scoring assigns a trust rating of 0 out of 100, and two of ninety‑five VirusTotal scanners have flagged the domain as malicious. Given the observed infrastructure and the presence of multiple indicators of compromise, defenders should add parliament.rodeo to deny‑list rules at network perimeter and email filtering layers. Continuous monitoring of the associated IP address and name server infrastructure is advised, and any inbound traffic should be redirected to a sinkhole for further analysis. Incident response teams should assume credential harvesting activity and advise users to avoid any unsolicited requests that reference the loan offering described in the page title.