gmeetingconference[.]com

Analysis as of July 23, 2026 confirms that the domain gmeetingconference.com is being used for a high‑risk generic phishing campaign. The domain was registered on June 08, 2026 through Tucows Domains Inc. and is currently active. DNS resolution points to the IPv4 address 209.182.224.202, and the authoritative name servers are ns3.loominost.com and ns4.loominost.com. The infrastructure has been observed on a single security blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one trusted sinkhole has identified malicious activity originating from this host.

VirusTotal has recorded three detections out of ninety‑five scanning engines, demonstrating that multiple independent AV products have flagged the domain as malicious. The presence of these detections, combined with the blocklist entry, provides corroborating evidence that the site is being leveraged for credential‑stealing or other fraudulent operations. No public page title, SSL certificate details, or HTTP response codes have been disclosed in the available intelligence, so the exact content served by the site remains unverified. Consequently, analysts cannot confirm the specific lure or target brand presented to victims, only that the overall threat category is generic phishing.

Defenders should immediately add gmeetingconference.com to DNS and URL filtering policies, enforce blocklisting of the associated IP address 209.182.224.202, and monitor for any outbound connections to the loominost name servers. Continuous re‑scanning on VirusTotal or similar platforms is advised to capture any changes in detection status. Because the domain is newly created, rapid takedown requests to the registrar Tucows Domains Inc. may be effective if sufficient evidence is gathered.