apps-meta[.]com

PhishDestroy's analysis identifies apps-meta.com as a credential theft phishing domain, impersonating a generic login page likely targeting Facebook or Meta accounts despite not matching official branding. The site presents a 'Securing access' page designed to harvest usernames and passwords. No specific drainer kit was detected, but the threat remains active and dangerous.

Technical indicators paint a clear picture of malicious intent. VirusTotal flags the domain with 13 out of 95 security vendors detecting malicious activity. The domain was registered on May 10, 2026, through CNOBIN INFORMATION TECHNOLOGY LIMITED, a registrar often associated with low-reputation sites. It resolves to IP address 193.169.194.34 and uses a Let's Encrypt / R12 SSL certificate for a false sense of security. Google Safe Browsing status is not explicitly listed, but the domain appears on three security blocklists, confirming it is widely considered harmful.

As of the assessment date, apps-meta.com remains active and accessible. Users who have visited the site should immediately change passwords on any accounts potentially compromised and enable two-factor authentication. PhishDestroy recommends blocking this domain at the network level and cautioning against any interaction. The hosting provider has not yet responded to takedown requests, and residual risk persists until the domain is fully deactivated.