meetwithleader[.]com

meetwithleader.com is currently active and classified as a high‑risk phishing infrastructure. The domain was registered on 5 December 2025 through Wild West Domains, LLC and resolves to the Cloudflare‑owned address 104.18.41.175, which is announced as part of AS13335 in the United States. DNS resolution is served by DigitalOcean nameservers ns1.digitalocean.com, ns2.digitalocean.com and ns3.digitalocean.com. An HTTPS endpoint presents a Let’s Encrypt certificate issued by the E7 authority, confirming the use of a valid TLS layer. HTTP requests receive a 302 redirect, and the only observed page title is “Calendly”, suggesting a possible impersonation of the Calendly scheduling service, although the content of the page has not been captured.

The site incorporates a stack of technologies that include Ruby on Rails, Google Sign‑in, Stripe payment processing, Salesforce Marketing Cloud Account Engagement, HubSpot integration and reCAPTCHA, as well as Apple iCloud Mail support. Such a combination is typical of credential‑harvesting pages that aim to collect login credentials and payment details. The domain appears on two independent security blocklists and has been flagged by PhishDestroy and ScamSniffer. AlienVault OTX lists the domain in a single threat‑intel pulse, and VirusTotal reports that five out of ninety‑five scanning engines have raised detections, reinforcing the malicious assessment. Gridinsoft assigns a trust score of zero out of one hundred, indicating a strong confidence in the site’s malicious nature.

Defenders should block any network traffic to 104.18.41.175 and add meetwithleader.com to URL filtering and email security policies. Continuous monitoring of the domain’s DNS records is advised, as the underlying Cloudflare front‑end could be re‑used for additional malicious campaigns.