googlemeetings[.]us

This domain, googlemeetings.us, was identified as a high-risk brand impersonation site targeting Google, specifically mimicking Google Meet as part of a tech support scam. The domain was registered on February 21, 2026, through NameSilo, LLC, and resolved to the IP address 104.225.130.131, hosted under AS395092 (Shock Hosting LLC) in the US. Infrastructure analysis reveals the use of nameservers ns3.loominost.com, ns4.loominost.com, ns7.loominost.com, and ns8.loominost.com, which may be associated with other malicious domains. The site lacked an SSL certificate, increasing the likelihood of interception or manipulation of traffic.

The page title, 'Google Meet Mockup - Windows,' suggests an attempt to deceive users into believing they are accessing a legitimate Google Meet interface, likely to facilitate fraudulent tech support interactions. At the time of assessment, the domain was offline, though it had been flagged by 12 of 93 security vendors on VirusTotal prior to takedown. It appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigned a trust score of 0/100, indicating high confidence in its malicious nature.

Defenders should treat this domain as confirmed malicious and prioritize blocking it at the DNS and network levels. Historical WHOIS and passive DNS data should be reviewed to identify related infrastructure or campaigns. Given the domain's association with a known scam type and its use of impersonation tactics, monitoring for similar domains registered through NameSilo or hosted on the same IP range is recommended. No evidence of credential harvesting or malware distribution was confirmed, but the domain's intent aligns with typical tech support scam methodologies.