GoogVerify: fake Google Meet call that relays the Google password and 2-Step Verification to an operator

Self-hosted phishing kit that calls itself "GoogVerify". The lure is a fake incoming Google Meet video call, with a ringtone and a request for the front camera, or a fake shared map location. Either one opens a Google sign-in. The email address and password go to the kit's own server, and the page then waits while the operator uses them on the real Google account. When Google sends its sign-in prompt to the victim's phone, the operator pushes the number from that prompt back to the page, and the victim is told to tap it, which completes the operator's sign-in. A wrong password sends the victim back to try again. Each copy has an operator panel and an install page, and copies have run on domains such as meet-google[.]cyou, meet-google[.]live, qooglo[.]com and l4-l4[.]site. A match means a page carrying the kit, its script or its installer, or a scan of one of its known hosts.