joinlivemeeting[.]chat

Analysis of joinlivemeeting.chat indicates active credential-phishing infrastructure targeting virtual meeting platforms. The domain, registered on April 29, 2026, through NameCheap, Inc., currently resolves to 66.29.141.228, an IP address geolocated to the United States and associated with Namecheap hosting services. Infrastructure review reveals nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com, alongside MX records pointing to mx1-hosting.jellyfish.systems with priorities 5 and 10, suggesting potential email-based attack vectors. As of July 12, 2026, the domain returns an HTTP 200 status with a page title 'Namecheap Parking Page,' though this may reflect a staging state prior to full deployment. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is flagged in one AlienVault OTX threat intelligence pulse, corroborating its malicious classification. Gridinsoft assigns a trust score of 0/100, further supporting high-risk designation. While no vendor detections are currently recorded in VirusTotal scans, this absence does not confirm safety, particularly given the domain's recent registration and active blocklist presence. The SSL certificate, issued by Sectigo Limited (Sectigo Public Server Authentication CA DV R36), provides baseline encryption but offers no assurance of legitimacy. Defenders should treat this domain as operational phishing infrastructure, particularly in contexts involving virtual meeting invitations or credential harvesting. Monitoring for changes in page content and MX record activity is recommended to assess evolving attack methods.