hub-meteora[.]pro

This domain, hub-meteora.pro, is flagged for brand impersonation targeting Google. Analysis indicates a fraudulent login portal designed to harvest user credentials, mimicking the legitimate Google authentication interface. The page title explicitly displays 'Google,' reinforcing the deception through visual and technical spoofing techniques. Technical indicators confirm elevated risk: the domain resolves to IP address 216.58.206.36 and was registered through Cloudflare, Inc. infrastructure. It employs Google Trust Services SSL certificates, likely obtained through fraudulent means or abuse of certificate issuance processes. VirusTotal detection score stands at 4/95 security vendors, while the domain appears on one security blocklist. The site utilized Google Web Server technology, HSTS, and HTTP/3 protocols, further complicating detection by blending in with legitimate traffic patterns. Current status shows the domain has been taken offline, though residual risk persists. While active, the infrastructure posed a direct threat to users through credential harvesting and potential follow-on attacks. Organizations should monitor for related domains leveraging similar SSL certificate patterns or Cloudflare registration characteristics. Users are advised to verify domain authenticity before entering credentials, particularly when redirected from unexpected sources.