support1[.]agency-partner-hub[.]com

This domain is flagged as an active brand impersonation phishing site targeting users of Meta Business services. Analysis indicates the site mimics the Meta Business Help Centre login interface, designed to harvest credentials from business account owners who believe they are accessing legitimate support resources. The threat specifically exploits trust in Meta’s branding to deceive users into entering sensitive login details, which are then captured for unauthorized access or further social engineering attacks. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on April 08, 2026, through Gransy, s.r.o., a registrar frequently associated with phishing campaigns. It resolves to the IP address 188.114.96.3, hosted behind CloudFlare infrastructure in Canada, which is commonly used to obfuscate server origins. Security vendors on VirusTotal have flagged the domain as malicious, with 22 out of 95 engines detecting it as phishing. Additionally, the domain appears on one security blocklist, and the SSL certificate issued by Let’s Encrypt (serial E7) does not mitigate the risk, as phishing sites often use valid certificates to appear legitimate. Users who have visited support1.agency-partner-hub.com or entered credentials on the site should take immediate action to mitigate potential compromise. First, reset passwords for any accounts accessed through the site, prioritizing Meta Business and associated email accounts. Enable multi-factor authentication where available to prevent unauthorized access. Monitor linked accounts for unusual activity, such as unauthorized logins or changes to account settings. If financial or payment information was entered, contact the relevant institution to flag potential fraud. Finally, report the incident to internal security teams or the official Meta Business support channel to assist in broader threat mitigation efforts.