hub-live[.]wixstudio[.]com

hub-live.wixstudio.com was registered through GoDaddy.com, LLC on April 24 2026. The domain resolves to 34.144.206.118, an address hosted on Google Cloud in the United States and served behind the Envoy reverse‑proxy. Infrastructure analysis shows the site employed Wix, React, Lodash, HSTS and Google Cloud CDN, with HTTP/3 enabled. The TLS certificate is issued by Let’s Encrypt (R12), confirming a valid HTTPS endpoint despite the site being taken offline. An HTTP request to the host returns a 404 status and the page title “404 Error: Page Not Found | Wix Studio”, indicating that the original content is no longer accessible. The domain is listed on a single security blocklist and is actively blocked by PhishDestroy.

VirusTotal scans report four positive detections out of 94 security vendors, reinforcing the malicious classification. Gridinsoft assigns a trust score of 0/100, the lowest possible rating. Nameservers are dns1.p08.nsone.net through dns4.p08.nsone.net, consistent with the registrar’s configuration. The available evidence points to a generic phishing operation that has already been decommissioned, as reflected by the offline status and 404 response. However, the presence of the domain on blocklists and multiple vendor detections suggests that phishing pages may have been hosted previously and could have been used to harvest credentials or deliver malicious payloads.

Because the underlying infrastructure (Google Cloud IP, Wix platform) is publicly accessible, threat actors could potentially reactivate the domain or clone its configuration. Defenders should continue to block the IP address 34.144.206.118 and add hub-live.wixstudio.com to URL filtering policies. Monitoring of the associated nameservers for any re‑registration activity is advisable. Given the low trust score and existing vendor flags, the domain should be treated as high‑risk until further verification confirms its removal from malicious use.