member21[.]agency-partnerhub-platform[.]com
“Meta Business Help Centre”
member21.agency-partnerhub-platform.com — المحتوى غير متوفر. انتحال العلامة التجارية: ["google"]; نوع الاحتيال: Credential Phishing. ملخص الأدلة: VirusTotal 21/94 (ADMINUSLabs, BitDefender, CRDF, CyRadar, ESET); URLQuery 6 alerts; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100. مسجّل النطاق: Gransy, s.r.o.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
This domain, member21.agency-partnerhub-platform.com, poses a significant credential theft risk by masquerading as the Meta Business Help Centre. Analysis indicates the site was designed to deceive users into entering sensitive login information, such as Facebook or Meta Business Suite credentials, which attackers could then harvest for unauthorized account access, financial fraud, or further phishing campaigns. The page title explicitly mimics legitimate Meta support channels, increasing the likelihood of successful social engineering attacks against business users and page administrators. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on November 18, 2025, through Gransy, s.r.o., a registrar frequently associated with abusive registrations. It resolves to the IP address 104.21.75.113, hosted by Cloudflare in Canada, a common tactic to obscure the true origin of phishing infrastructure. VirusTotal detection shows 21 out of 95 security vendors have flagged this domain as malicious, while it appears on at least one security blocklist and was actively blocked by enterprise phishing protection systems prior to takedown. Users who visited member21.agency-partnerhub-platform.com should immediately take corrective action to mitigate potential compromise. First, reset all passwords associated with Meta Business accounts, including linked email addresses and any accounts sharing the same credentials. Enable multi-factor authentication (MFA) using an authenticator app or hardware key, avoiding SMS-based methods where possible. Monitor account activity for unauthorized logins, ad spend, or administrative changes. If financial information was entered, contact the relevant financial institution to secure accounts and review recent transactions. Report the incident to the legitimate Meta Business support channels and consider filing a report with local cybercrime authorities or dedicated fraud reporting platforms.
استخبارات أمن الشبكات
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | member21.agency-partnerhub-platform.com |
malicious | Sinkholed |
| OpenDNS | member21.agency-partnerhub-platform.com |
phishing | Phishing Block |
| DigiCert UltraDNS | member21.agency-partnerhub-platform.com |
malicious | Sinkholed |
| DNS4EU | member21.agency-partnerhub-platform.com |
malicious | Sinkholed |
| Hagezi Threat Feed | member21.agency-partnerhub-platform.com |
malicious | Sinkholed |
| DigiCert UltraDNS | apip.cc |
malicious | Sinkholed |
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
Registration: agency-partnerhub-platform.com
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain agency-partnerhub-platform.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
التقنيات · 6 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
JavaScript library for building user interfaces with component-based architecture.
React framework for production with hybrid static and server rendering.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comModule bundler for modern JavaScript applications.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
تحليل VirusTotal
الأدلة والتقارير الخارجية
PD-20260331-E44E85 Recipient: abuse@regtons.com هل تأثرت بهذا الموقع؟
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.
تحقق من أي نطاق
تحليل التهديدات باستخدام قائمة الحظر المخزنة، وWHOIS، وDNS، وأدلة الفحص العامة
امسح الآنالإبلاغ عن محاولة تصيد احتيالي
أرسل النطاقات المشبوهة إلى قاعدة بيانات التهديدات الخاصة بنا — ساهم في حماية المجتمع
إبلاغتحديثات فورية حول التهديدات
تقارير التصيد الاحتيالي الأخيرة وتغييرات التوفر الملحوظة
مراقبةابقَ على اطلاع، وابقَ آمنًا
راقب التهديدات في الوقت الفعلي أو اعترض على هذا الإدراج إذا كنت تعتقد أنه إنذار كاذب