join-a-meeting[.]us

Analysis of join-a-meeting.us shows a newly registered domain created on July 23, 2026 and currently active. The domain is hosted on Cloudflare infrastructure, using the nameservers novalee.ns.cloudflare.com and rajeev.ns.cloudflare.com, and resolves to the IP address 188.114.96.3, a Cloudflare edge node. Registration was performed through NameSilo, LLC, a registrar commonly used for both legitimate and malicious registrations. The domain appears on one public blocklist, specifically PhishDestroy, indicating that at least one security organization has classified it as malicious.

VirusTotal reports that the domain has been scanned by 91 antivirus and URL scanning vendors, with none reporting a detection at the time of the scan; this lack of detection should not be interpreted as evidence of safety, as the domain may employ techniques that evade automated analysis. No additional intelligence such as Safe Browsing status, OTX mentions, SSL certificate details, HTTP response codes, trust‑score metrics, or page‑title information is available in the current data set. Consequently, the exact content and intended phishing lure remain unknown.

Defenders should consider the following actions: add join-a-meeting.us to web‑filter deny lists, monitor DNS queries for the domain, and continue to probe the site with sandboxed URL analysis tools to capture any payloads or credential‑phishing forms that may appear. Ongoing surveillance of the associated IP address and Cloudflare edge node is advisable, as shared hosting can obscure the true source of malicious activity. Given its presence on a known blocklist and the lack of public safety signals, the domain should be treated as a potential phishing threat pending further investigation.