googie[.]us-gmeet[.]com

The domain googie.us-gmeet.com was registered on 21 February 2026 through HOSTINGER operations, UAB. Its authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, indicating a parking service rather than dedicated hosting. DNS resolution points to IP address 45.61.157.248, which belongs to AS14956 RouterHosting LLC in the United States. No TLS certificate is presented, and HTTP requests receive no response because the site is currently offline. The page title returned by the server, when reachable, is the literal string "googie.us-gmeet.com/", providing no additional context about the content. Security telemetry shows the domain is listed on three independent blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL.

Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme suspicion. VirusTotal analysis records two detections out of ninety‑three scanned vendors, confirming malicious interest. The site is categorized as a brand‑impersonation campaign targeting Google, consistent with the reported threat type. Because the site is offline, direct inspection of the landing page, form fields, or malicious payloads is not possible. The lack of an SSL certificate also prevents verification of any certificate pinning or hijacked TLS.

No additional metadata such as campaign identifiers, phishing kits, or associated URLs have been disclosed. Defenders should continue to block the domain at network perimeter and endpoint layers, update URL filtering rules to include the observed blocklist entries, and monitor for any future re‑activation. Threat intel consumers should note the hosting provider RouterHosting LLC and the registrar HOSTINGER operations, UAB for correlation with other incidents. Continuous re‑scanning on VirusTotal or similar services is advised to capture any new detections.