meteora-io[.]web[.]app

This domain, meteora-io.web.app, poses a specific threat of brand impersonation, targeting the brand across. The domain is currently active and has been observed to mimic the official website of across, potentially misleading users and collecting sensitive information such as login credentials or personal data. The impersonation is sophisticated, with the page title set to 'Home | Meteora', which could be designed to appear legitimate to unsuspecting visitors.

Analysis indicates that meteora-io.web.app has not been flagged by VirusTotal, with 0/95 detections, suggesting that the domain may be relatively new or has not yet been widely reported. The domain is registered through Google LLC and resolves to the IP address 199.36.158.100, which is hosted by Fastly, Inc. in the United States. The SSL certificate is issued by Google Trust Services / WR4, adding a layer of perceived legitimacy. Despite the lack of widespread detection, the domain appears on one security blocklist and is blocked by PhishDestroy, indicating that some security systems have identified it as a threat.

If users have visited meteora-io.web.app, they should immediately check their accounts for any unauthorized activity, especially those associated with the brand across. It is recommended to change passwords and enable two-factor authentication (2FA) on all relevant accounts. Users should also report any suspicious activity to their security teams and avoid clicking on links or providing personal information on this domain. Regular monitoring of account statements and security alerts is advised to detect any potential misuse of credentials.