livemeets[.]app

The domain livemeets.app was registered through Namecheap Inc. on May 07 2026 and is currently classified as a generic phishing site with a high risk rating. The registration age is less than three months, and the domain resolves to a single IPv4 address (199.188.200.59) hosted in the United States.

Infrastructure analysis shows the domain uses Namecheap’s default parking nameservers (dns1.namecheaphosting.com, dns2.namecheaphosting.com). An SSL certificate issued by Sectigo Limited (Sectigo Public Server Authentication CA DV R36) is present, and HTTP requests return a 200 status code displaying a generic Namecheap parking page. The domain appears on three public blocklists and is referenced in one AlienVault OTX pulse.

Threat intel indicates the domain is actively blocked by multiple sink‑hole and anti‑phishing feeds, including PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent. MX records are configured (mx1-hosting.jellyfish.systems with priority 5 and another host with priority 10), which may be used to support credential harvesting or spam distribution, though no malicious payload has been observed in public scans.

At present no detections have been reported on large malware aggregation services, and VirusTotal returns zero positives from 95 engines. However, the absence of detections does not imply benign behavior; the domain’s rapid deployment, low trust score, and inclusion on multiple blocklists suggest a deliberate phishing campaign that may still be in its initial phase.

Defenders should add livemeets.app and its resolving IP 199.188.200.59 to deny lists at the DNS and firewall layers, monitor for any outbound connections to the host, and inspect mail traffic for the listed MX hosts. Continuous re‑evaluation is advised, as the domain remains active and may evolve its payload delivery mechanisms.