petitions[.]me

The domain petitions.me is currently classified as a high‑risk generic phishing site. Infrastructure analysis shows the site is hosted on GitHub Pages and served through Varnish and Fastly caching layers, with an SSL certificate issued by Let’s Encrypt (R12). DNS resolution points to IP 185.199.108.153, an address owned by GitHub, Inc., and the authoritative nameservers are ns01.domaincontrol.com and ns02.domaincontrol.com. The page returns HTTP 200 and presents the title "Help change the world"; no additional content has been examined. The site has been blocked by the PhishDestroy blocklist and appears on one other security blocklist. A Gridinsoft trust score of 0/100 further indicates a lack of credibility. VirusTotal scans report three of ninety‑one security vendors flagging the domain, reinforcing the malicious assessment. While the exact phishing vector and targeted brand are not disclosed, the evidence confirms an active malicious infrastructure. Defenders should immediately block petitions.me at perimeter and DNS layers, monitor for related traffic to the identified IP, and consider sinkholing the domain to disrupt ongoing campaigns. Continuous re‑evaluation is advised as further intelligence becomes available.