meetinfos[.]click

The domain meetinfos.click has been identified as a credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates this domain is currently offline, though it previously operated as an active phishing endpoint designed to capture sensitive authentication details such as usernames, passwords, and potentially multi-factor authentication codes. No specific brand impersonation has been confirmed, but the generic nature of the domain name suggests broad targeting across multiple platforms or services. Infrastructure analysis reveals the domain was registered through NameCheap, Inc. on February 21, 2026, and resolves to the IP address 188.114.97.3. It is flagged by 8 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0 out of 100. The domain appears on three security blocklists and is actively blocked by multiple threat intelligence feeds. Technical indicators include the use of Cloudflare for content delivery and HTTP/3 protocol support, alongside a Google Trust Services SSL certificate, which may have been leveraged to lend an appearance of legitimacy to the phishing page. Current status confirms the domain is offline, reducing immediate risk to end users. However, the infrastructure remains intact, and the domain could be reactivated or repurposed for future malicious campaigns. Organizations and individuals are advised to block the domain and associated IP address at the network level. Security teams should monitor for related indicators of compromise, including the SSL certificate thumbprint and any subdomains or redirect chains linked to meetinfos.click. Users who may have interacted with the domain should reset credentials for any accounts accessed during the exposure window and enable multi-factor authentication where available.