hubs-desktoplive[.]wixstudio[.]com

PhishDestroy identifies hubs-desktoplive.wixstudio.com as an active generic phishing domain posing as a legitimate service to harvest user credentials through deceptive web interfaces. The domain leverages WixStudio’s hosting infrastructure to appear legitimate, likely impersonating a software or service hub to trick victims into entering sensitive information. No specific brand or drainer kit has been confirmed at this stage, but the structure suggests a credential-harvesting campaign targeting unsuspecting users under false pretenses. This domain resolves to IP address 34.144.206.118 and is secured with a Let’s Encrypt SSL certificate, which may enhance its credibility. VirusTotal reports a low detection score of 1 out of 95 security vendors as of the investigation timestamp, indicating minimal early-stage detection. The domain was created on an unspecified date but is currently active, and its registrar is Wix.com based on the WixStudio subdomain structure. Google Safe Browsing (GSB) status and blocklist counts remain unconfirmed in open sources, but the low VT detection combined with the domain’s active status suggests it is newly deployed to evade detection. The campaign remains active as of the latest intelligence, with no known takedown or mitigation in place. Users should avoid accessing this domain and report any encounters to their security teams. Remaining risk is elevated due to the domain’s low detection rate and use of legitimate hosting to mask malicious intent. Immediate blocking of the domain and IP at network and endpoint levels is recommended to prevent potential credential theft.