# PhishDestroy domain threat record: meet-google.sbs

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/meet-google.sbs/
Machine-readable companion: https://phishdestroy.io/domain/meet-google.sbs/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 16:41:24 UTC
- Last availability or vendor check: 2026-10-25 16:41:24 UTC
- Stored record updated: 2026-10-25 19:30:47 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Google

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: NameSilo, LLC
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-23 13:18:31 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a173ee-61dd-70e8-801b-fbd809116929/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/meet-google.sbs
- Certificate Transparency search: https://crt.sh/?q=%25.meet-google.sbs
- Web Archive lookup: https://web.archive.org/web/*/https://meet-google.sbs/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added meet-google.sbs to its blocklist on 2026-10-25 after an admin report noted the domain was only two days old. The page fetched on that date returned HTTP 200 and displayed the title “Google Meet”. The prior AI assessment marked the site as “unknown” because the page content was insufficient to determine malicious behavior.

How the scam works
The listing does not prove a specific fraud technique; domains that copy a well‑known brand’s name and page title are commonly used to lure users into entering credentials or granting access. No concrete phishing form or malicious payload was observed on the captured page.

Evidence
VirusTotal scanned the domain on 2026-10-24 and reported 0 detections out of 92 engines. Google Safe Browsing checked on 2026-10-25 and did not flag the site. OTX showed 0 pulses on the same day. External blocklists MetaMask and SEAL listed the domain, and urlscan.io’s analysis on 2026-10-25 gave a malicious verdict with a score of 100, categorising it as phishing targeting Google.

Infrastructure
The domain was registered with NameSilo on 2026-10-23 and uses Cloudflare’s network, resolving to IP 188.114.97.3 (CloudFLARENET‑EU, GB). TLS was issued by Google Trust Services, valid from 2026-10-23 to 2027-01-21, and the nameservers are darl.ns.cloudflare.com and serena.ns.cloudflare.com. DNSSEC is not enabled.

What to do
Visitors should not enter Google credentials or grant any permissions on this site; if they have, they should change passwords and enable two‑factor authentication. Organizations should block meet-google.sbs at the network perimeter and monitor logs for any requests to the domain. PhishDestroy’s internal listing can be used as an indicator of compromise for threat‑intel feeds.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a173ee-61dd-70e8-801b-fbd809116929/
Cloudflare Radar report: https://radar.cloudflare.com/scan/0e881725-5464-4de0-b106-0c4ae5806568
Stored capture screenshot: https://i.ibb.co/qYTPMCMK/2f401702c7c7.png
Cloudflare Radar screenshot (2026-10-25T16:43:49Z): https://screenshots.phishdestroy.io/cf/0e881725-5464-4de0-b106-0c4ae5806568.png
URLScan screenshot (2026-10-25T16:43:54Z): https://screenshots.phishdestroy.io/us/01a173f2-6339-715d-b6a6-22a9c6eb2094.png
URLScan capture report: https://urlscan.io/result/01a173f2-6339-715d-b6a6-22a9c6eb2094/
VirusTotal report: https://www.virustotal.com/gui/domain/meet-google.sbs
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=meet-google.sbs
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 16:45:14 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/qYTPMCMK/2f401702c7c7.png
  Captured: 2026-10-25 16:41:24 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a173ee-61dd-70e8-801b-fbd809116929.png
  Captured: 2026-10-25 16:41:24 UTC
  Source report: https://urlscan.io/result/01a173ee-61dd-70e8-801b-fbd809116929/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0e881725-5464-4de0-b106-0c4ae5806568.png
  Captured: 2026-10-25 16:43:49 UTC
  Source report: https://radar.cloudflare.com/scan/0e881725-5464-4de0-b106-0c4ae5806568
  SHA-256: fe33c6249edc238560a7c6dac3b959d9ee7ef70cb1c4b4b5c0a7e7b4e34d440a
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a173f2-6339-715d-b6a6-22a9c6eb2094.png
  Captured: 2026-10-25 16:43:54 UTC
  Source report: https://urlscan.io/result/01a173f2-6339-715d-b6a6-22a9c6eb2094/
  SHA-256: aa5e1b7df7c3d3715c679c93fad93bf2f52d0594432fd7506a0aad0a6958ba03

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T16:44:44Z",
        "uuid": "01a173ee-61dd-70e8-801b-fbd809116929",
        "scanned_at": "2026-10-25T16:41:07Z",
        "final_url": "https://meet-google.sbs/sah-spus-wvw",
        "status": 200,
        "redirected": "same-domain",
        "redirects": [
            {
                "to": "https://meet-google.sbs/",
                "from": "http://meet-google.sbs/",
                "status": 307
            },
            {
                "to": "https://meet-google.sbs/sah-spus-wvw",
                "from": "https://meet-google.sbs/"
            }
        ],
        "ip": "188.114.97.3",
        "domains": [
            "fonts.googleapis.com",
            "fonts.gstatic.com"
        ],
        "ips": [
            "142.251.14.94",
            "142.251.20.95",
            "188.114.97.3"
        ],
        "asns": [
            "15169",
            "13335"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "meet.google.com",
            "support.google.com"
        ],
        "doc_hash": "cd1424379b5d043f3387e9e6196446715a0622c0c261e3bbf93607d4ab39b37f",
        "script_hashes": [
            "cdef630c03127510ba3d15627d22eababf6aa37d4845124073863f0e8d3eb9b9"
        ],
        "tls": {
            "san": [
                "meet-google.sbs",
                "*.meet-google.sbs"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "meet-google.sbs",
            "protocol": "QUIC",
            "valid_to": "2027-01-21T16:52:10Z",
            "valid_from": "2026-10-23T15:52:15Z"
        },
        "domain_age_days": 1,
        "apex_age_days": 1,
        "tls_age_days": 2,
        "tls_valid_days": 90,
        "requests": 15,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 93,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "google"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Google"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T16:44:45Z",
        "uuid": "0e881725-5464-4de0-b106-0c4ae5806568",
        "scanned_at": "2026-10-25T16:43:49Z",
        "final_url": "https://meet-google.sbs/sah-spus-wvw",
        "status": 200,
        "history": [
            {
                "url": "https://meet-google.sbs/",
                "status": 200
            },
            {
                "url": "https://meet-google.sbs/sah-spus-wvw",
                "status": 200
            }
        ],
        "dom_hash": "430f005d82a86abdb3059e00de35537ec2fd41155d12a4a70a7929ebb1342a2b",
        "doc_hash": "c97c7ca810c5ffaa1fd41e8413bcfa40cb08db1ee8252a1c6fc833c9b0b513fc",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "New Domains",
            "Security Risks"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "meet-google.sbs",
                "type": "A",
                "value": "172.67.222.191"
            },
            {
                "name": "meet-google.sbs",
                "type": "A",
                "value": "104.21.94.114"
            },
            {
                "name": "meet-google.sbs",
                "type": "AAAA",
                "value": "2606:4700:3037::6815:5e72"
            },
            {
                "name": "meet-google.sbs",
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:debf"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.222.191",
        "whois": {
            "registrar": "NameSilo, LLC",
            "created": "2026-10-23T15:18:31Z",
            "updated": "2026-10-23T15:18:33Z",
            "expires": "2027-10-23T23:59:59Z",
            "nameservers": [
                "darl.ns.cloudflare.com",
                "serena.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T16:42:36Z",
        "analysis_at": "2026-10-24T09:12:33Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "registrar": "NameSilo, LLC",
        "created": "2026-10-23T15:18:31Z",
        "expires": "2027-10-23T23:59:59Z",
        "updated": "2026-10-23T15:18:33Z",
        "first_seen": "2026-10-23T15:35:30Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.222.191"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "serena.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:debf"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.94.114"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::6815:5e72"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "darl.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "darl.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-24T09:14:47Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "meet-google.sbs",
                "*.meet-google.sbs"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "1cad3f17473963350e26b66a5c90c703",
            "sha256": "50c54bd01818f4dcaf005b67e978ff2f4c918c21d70ea4da2b53bc73366450cc",
            "subject": "meet-google.sbs",
            "valid_to": "2027-01-21T16:52:10Z",
            "valid_from": "2026-10-23T15:52:15Z"
        },
        "whois": {
            "registrar": "NameSilo, LLC",
            "registrar_iana_id": "1479",
            "registrar_url": "https://www.namesilo.com",
            "created": "2026-10-23T15:18:31Z",
            "updated": "2026-10-23T15:18:33Z",
            "expires": "2027-10-23T23:59:59Z",
            "status": [
                "addPeriod",
                "clientTransferProhibited",
                "serverTransferProhibited"
            ],
            "nameservers": [
                "darl.ns.cloudflare.com",
                "serena.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T16:44:56Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "meet-google.sbs"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "social_tags": {
            "title": "Google Meet",
            "themeColor": "#f8f9fa"
        },
        "trackers": {
            "requests": 7,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 640,
                "tls": 18,
                "wait": 51,
                "connect": 14,
                "download": 1
            },
            "response_ms": 724
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 1142,
            "co2_grams": 0,
            "cleaner_than": 95
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.245.59.98",
                    "host": "darl.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.58.220",
                    "host": "serena.ns.cloudflare.com"
                }
            ],
            "zone": "meet-google.sbs"
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "meet-google.sbs"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "serena.ns.cloudflare.com",
                "darl.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"darl.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418275980, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://meet-google.sbs"
            ]
        },
        "whois": {
            "registrar": "NameSilo, LLC",
            "created": "2026-10-23T15:18:31Z",
            "updated": "2026-10-23T15:18:33Z",
            "expires": "2027-10-23T23:59:59Z",
            "status": [
                "serverTransferProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp",
                "addPeriod https://icann.org/epp"
            ],
            "nameservers": [
                "darl.ns.cloudflare.com",
                "serena.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html"
            }
        }
    }
}
```