googlemeetingview[.]com

Analysis of the domain googlemeetingview.com, observed on 25 July 2026, indicates a brand‑impersonation operation targeting Google users through a tech‑support narrative. The domain was registered through NameSilo, LLC on 21 February 2026 and is currently taken offline. DNS resolution points to the IPv4 address 104.225.130.131, which is hosted by Shock Hosting LLC (AS395092) in the United States. The authoritative name servers are ns3.loominost.com, ns4.loominost.com, ns7.loominost.com, and ns8.loominost.com. No TLS certificate is presented for the site, suggesting that any HTTP communication would be unencrypted.

Reputation data shows a Gridinsoft trust score of 0 / 100, and the domain is listed on three external blocklists. It has also been flagged by the PhishDestroy, MetaMask, and SEAL blocking services. VirusTotal scans report six of ninety‑five security scanners labeling the domain as malicious, reinforcing the suspicion of abusive activity. The page title returned by the server, “Google Meet Mockup - Windows,” aligns with the declared impersonation of Google and the tech‑support scam classification. Defenders should update their URL filtering and DNS‑blocking policies to include the four loominost name servers and the associated IP address.

Because the site lacks a certificate, TLS interception is not applicable, but HTTP inspection can still capture any malicious payloads if the domain becomes active again. Continuous monitoring of the registration details and the hosting ASN is advised, as the infrastructure may be repurposed for future campaigns. Indicators of compromise (IOCs) to be recorded include the domain name, registration date, registrar, IP address, ASN, and the observed page title. Awareness messages to end users should emphasize that unsolicited tech‑support prompts claiming to be from Google are not associated with the legitimate Google Meet service.