meta-transparency-review[.]web[.]app

Analysis of the domain meta-transparency-review.web.app indicates active phishing infrastructure targeting users under the guise of a Meta-related service. The domain is registered through Google LLC and resolves to the IP address 199.36.158.100, a host associated with Google's web application hosting platform. As of July 13, 2026, the domain remains active, with a page title displaying only 'Loading...', suggesting either a placeholder or obfuscation technique to delay detection. The SSL certificate is issued by Google Trust Services, providing encrypted connections that may lend an appearance of legitimacy to unsuspecting users. Current detection metrics from security vendors are limited, with only 2 of 95 flagging the domain as malicious. This low detection rate does not preclude the domain's harmful intent, particularly given its naming convention, which implies a connection to Meta's transparency or review systems. The use of 'meta' in the subdomain, combined with terms like 'transparency' and 'review', aligns with common phishing tactics designed to exploit trust in official-sounding processes. Infrastructure analysis reveals no additional indicators of compromise beyond the domain's registration and hosting details, though the lack of substantive page content may indicate an early-stage campaign or one designed to evade automated scanning. Defenders should treat this domain as high-risk, particularly for users interacting with Meta platforms. Network-level blocking of 199.36.158.100 and the domain itself is recommended pending further analysis. Organizations should monitor for connections to this host, particularly from endpoints accessing Meta services, and investigate any user reports of unexpected redirects or login prompts. Given the domain's hosting on a legitimate platform, additional scrutiny of similarly structured domains (e.g., [brand]-transparency-review.web.app) may be warranted to identify related threats.