gmeetportal[.]us

Analysis of the domain gmeetportal.us indicates active brand impersonation targeting Google, with infrastructure and detection patterns consistent with phishing activity. The domain was registered on May 19, 2026, through NameSilo, LLC, and currently resolves to the IP address 168.235.88.209, hosted on AS3842 (InMotion Hosting, Inc.) in the United States. Nameservers are configured as ns1.dnsowl.com, ns2.dnsowl.com, and ns3.dnsowl.com, a pattern observed in other high-risk domains. The domain returns an HTTP 301 redirect status, though the destination remains unconfirmed. No SSL certificate is present, increasing the likelihood of interception or manipulation of user data. Detection metrics reinforce the high-risk classification. The domain appears on three security blocklists and is flagged by seven of 91 vendors in aggregated threat intelligence. Gridinsoft assigns a trust score of 0/100, and AlienVault OTX includes the domain in a threat intelligence pulse. The page title, 'Welcome to gmeetportal.us,' does not explicitly confirm the phishing vector but aligns with common impersonation tactics. The absence of an SSL certificate and the use of a 301 redirect further suggest an intent to deceive users into disclosing credentials or other sensitive information. Defenders should treat this domain as active and malicious. Network-level blocking is recommended, particularly for organizations using Google services. The domain's continued resolution and lack of takedown action indicate it remains operational as of July 12, 2026. Further investigation into the redirect target and associated infrastructure may reveal additional compromised assets or related campaigns.