meet[.]googleapps[.]eu[.]org

This domain, meet.googleapps.eu.org, is flagged as a high-risk brand impersonation threat targeting Google, specifically mimicking the Google Meet service. Analysis indicates the domain is designed to deceive users into entering credentials or other sensitive information under the guise of a legitimate Google product. The page title explicitly displays 'Google Meet,' reinforcing the illusion of authenticity to increase the likelihood of successful phishing attempts. Infrastructure analysis reveals the domain is registered through Gandi SAS and resolves to the IP address 66.33.60.34, hosted on Amazon.com, Inc. infrastructure (AS16509). The domain is currently flagged by 12 out of 95 security vendors on VirusTotal, and it appears on at least one security blocklist. The SSL certificate is issued by Let's Encrypt (R12), which, while providing encryption, does not validate the legitimacy of the site. No creation date is provided, but the domain remains active and operational as of this report. The current status of meet.googleapps.eu.org is active, with no evidence of takedown or mitigation at this time. Users and organizations are advised to block the domain at the network level and implement browser-based protections to prevent access. Given the domain's association with a well-known brand and its active status, the risk of credential compromise or unauthorized data access remains high. Security teams should monitor for related indicators of compromise, including the IP address and any subdomains or redirects associated with this infrastructure. Immediate reporting to relevant abuse contacts, such as the registrar and hosting provider, is recommended to facilitate takedown efforts.