parliamentarypetitions[.]uk

The domain parliamentarypetitions.uk was registered through Tucows Domains Inc. on September 10, 2025 and is currently taken offline. Infrastructure analysis shows the domain resolved to IP address 45.141.59.165, which is hosted in the Netherlands and belongs to AS213373 IP Connect Inc. The authoritative nameservers are ns1.amsterdam-hosting.to and ns2.amsterdam-hosting.to, indicating use of a Dutch hosting provider. No SSL certificate was observed for the site, leaving the HTTP service unencrypted. Reputation services rate the domain poorly: Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single security blocklist.

Malware scanning on VirusTotal reported three detections out of ninety‑five participating engines, confirming malicious activity. The site was flagged by PhishDestroy, and the page title returned by the HTTP response was "Petition – Petition," which does not reference the impersonated brand. The threat actor claims to impersonate Facebook, classifying the campaign as a brand‑impersonation scam.

While the domain is offline, the observed indicators—IP address, nameserver pair, lack of TLS, low trust score, and multiple vendor detections—should be added to defensive feeds. Network defenders are advised to block traffic to 45.141.59.165, add parliamentarypetitions.uk to URL filtering lists, and monitor for any resurgence of the domain or similar naming patterns. Continuous observation of the associated nameservers and the hosting ASN is recommended to catch potential re‑use of the infrastructure for new malicious domains.