fgchvjkhljkjghfdgv-meadowlandsapp[.]replit[.]app

This domain is flagged as an elevated-risk brand impersonation threat specifically targeting Outlook Web Access. Analysis indicates the page mimics Microsoft's authentication portal, presenting a login interface titled 'Outlook' to harvest credentials from unsuspecting users. The domain operates under the guise of legitimate cloud infrastructure but exhibits multiple indicators of malicious intent. Infrastructure analysis reveals the domain was created on April 16, 2021, and is registered through NOM-IQ Ltd dba Com Laude. It resolves to the IP address 34.117.33.233, hosted on Google LLC's AS396982 in the United States. The SSL certificate is issued by Google Trust Services under the WR3 root, a common tactic to appear trustworthy. Detection metrics show 20 out of 95 security vendors on VirusTotal flag the domain as malicious, while two independent blocklists (PhishDestroy and PhishingDB) have already listed it. The domain's current status is offline, though historical activity remains a concern. To mitigate risks associated with this brand impersonation threat, users should verify the legitimacy of any Outlook login portal by checking the URL for official Microsoft domains (e.g., outlook.office.com or outlook.live.com). Organizations are advised to implement email filtering rules to block known malicious domains and enforce multi-factor authentication (MFA) to reduce the impact of credential theft. Security teams should monitor network traffic for connections to the identified IP (34.117.33.233) and update blocklists with the domain and associated indicators. Employee training on recognizing phishing attempts, particularly those impersonating trusted brands, is recommended to prevent successful exploitation.