meteoras[.]cc

The domain meteoras.cc has been identified as a brand impersonation threat specifically targeting Google. Analysis confirms the domain was actively spoofing Google’s branding, as evidenced by the page title "Google" and its designation in threat intelligence sources. The domain is currently offline, but prior activity suggests malicious intent to deceive users into interacting with fraudulent content under the guise of a trusted service provider. Infrastructure analysis reveals meteoras.cc was flagged by 5 of 95 security vendors on VirusTotal, indicating moderate detection coverage. The domain was registered through NameCheap, Inc. on April 14, 2026, and resolved to the IP address 188.114.96.3. It appeared on three security blocklists, further corroborating its malicious classification. Additional risk indicators include a Gridinsoft trust score of 0/100 and its inclusion in one AlienVault OTX threat intelligence pulse. The domain’s registration details and hosting infrastructure align with patterns observed in coordinated phishing campaigns. Current status confirms meteoras.cc has been taken offline, likely due to enforcement actions or infrastructure takedowns. However, the domain’s prior activity and technical indicators warrant continued vigilance. Organizations and users are advised to monitor for residual threats, including potential redirects or re-registration under similar domains. Network defenders should update blocklists to include meteoras.cc and its associated IP address. Users who may have interacted with the domain should verify account integrity, particularly for services associated with the impersonated brand, and report any suspicious activity to relevant security teams.