case02[.]agency-partnerhub-platform[.]com

case02.agency-partnerhub-platform.com is confirmed as an active credential-draining phishing domain masquerading as the Meta Business Help Centre. PhishDestroy identifies this site as a generic phishing threat leveraging brand impersonation to harvest Meta Business Suite login credentials. The page title and visual elements closely replicate Meta’s official support interface, tricking users into entering their Meta account details under the guise of resolving a “business verification” issue. No evidence suggests the deployment of a sophisticated drainer kit; instead, the threat relies on social engineering and lookalike branding to deceive victims into submitting sensitive information. This domain exhibits multiple high-risk technical indicators. VirusTotal analysis confirms detection by 12 of 95 security vendors as of the seed date eef66b. The domain was registered through Gransy, s.r.o. on November 18, 2025, and resolves to IP address 172.67.222.203. It holds a valid SSL certificate issued by Google Trust Services, which may help it evade browser-based warnings. The site remains unblocked by Google Safe Browsing (GSB) at this time, increasing exposure to end users. These factors contribute to an elevated risk profile, with a high likelihood of continued operation and potential expansion to target additional Meta Business Suite users. The campaign is currently active and shows no signs of takedown. PhishDestroy assesses the remaining risk as elevated due to the domain’s recent creation, minimal vendor detection, and effective branding mimicry. Immediate action is required: users should avoid interacting with this domain, report it via Meta’s official phishing portal, and ensure browser security extensions are enabled. Organizations using Meta Business Suite should reinforce security awareness training emphasizing verification of support channels and the danger of unsolicited login prompts. While the domain’s short operational timeline limits historical data, its trajectory suggests rapid escalation in phishing sophistication if unchecked.