secure-workspace[.]partner-programhub[.]com

secure-workspace.partner-programhub.com is a subdomain of partner-programhub.com. PhishDestroy first observed the hostname on May 15, 2026. Stored content metadata identifies Facebook as the apparent target. The captured page title is “Accounts Centre”. Stored page analysis classifies the content as credential phishing. Current evidence score: 95/100 (critical).

Positive findings are stored from 5 sources: VirusTotal, DNS security resolvers, Cloudflare Radar, URLQuery, and URLScan. VirusTotal recorded 20 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Cluster25, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, Mimecast, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Jun 26, 2026 at 17:10 UTC. DNS security checks returned 5 blocking results across 14 tested policies: Cloudflare Family, Cloudflare Security, Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLQuery recorded 2 detections; no observation timestamp was retained. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Facebook and assigned phishing as its category on Jul 29, 2026 at 03:05 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 10:20 UTC. On May 15, 2026 at 01:25 UTC, Google Safe Browsing returned no flag; PhishStats returned no feed match.

HTTP 502 was recorded on Aug 7, 2026 at 01:24 UTC; content was unavailable. Registration records for the registrable domain partner-programhub.com list Gransy, s.r.o. as the registrar and May 15, 2026 as the creation date. Registration and first observation occurred on the same UTC date. At collection time, the hostname resolved to 172.66.0.96 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Google Trust Services as the certificate issuer with validity through Aug 12, 2026; checked May 15, 2026 at 05:00 UTC.

The content indicators and 5 positive source findings support the current Facebook-themed credential phishing classification.