msmeet[.]us

Analysis of the domain msmeet.us, observed as offline as of the report date, shows several indicators consistent with a Microsoft‑related brand‑impersonation campaign. The domain was registered on 27 February 2026 through NameCheap, Inc., and resolves to the IP address 23.254.167.21, which belongs to the Hostwinds LLC network (ASN 54290) located in the United States. No TLS certificate is presented, meaning the site is served over plain HTTP, which reduces the credibility of a legitimate Microsoft service. The authoritative nameservers dns1.registrar-servers.com and dns2.registrar-servers.com are typical of registrar‑provided DNS and do not suggest a custom infrastructure. The page title returned by the now‑taken‑down site reads "Free Online Meetings & Video Calls | Microsoft Teams", directly invoking the Microsoft Teams brand.

The listed brand target is Microsoft, and the documented scam type is a tech‑support scam, indicating that the operator likely attempted to convince victims that their Microsoft account or device required urgent assistance. Detection services have flagged the domain. VirusTotal reports a single positive detection out of 93 scanning engines, and three independent blocklists (PhishDestroy, MetaMask, SEAL) have already listed the domain. The presence on multiple blocklists confirms that security vendors have observed malicious activity associated with the domain.

No SSL certificate, combined with the offline status, suggests the site may have been short‑lived or taken down after detection. Uncertainties remain regarding the exact payload delivered to victims, the extent of any credential harvesting, and whether additional infrastructure (e.g., command‑and‑control servers) is linked to the same IP. Defenders should continue to block msmeet.us at perimeter and DNS layers, monitor for any resurgence of the same IP or registrar‑level registrations, and update detection rules to flag the observed page title and brand‑impersonation pattern.