rls[.]hubs-beefy[.]xyz

This domain, rls.hubs-beefy.xyz, presents a "Welcome to nginx!" page, indicating it is likely a placeholder or staging site for a potentially malicious operation. The low GridinSoft trust score of 0/100 and the absence of any branded content suggest it may be used for phishing, malware distribution, or as a command-and-control endpoint, though the specific threat cannot be determined from the landing page alone.

Technical analysis reveals the site is flagged by 2 out of 95 VirusTotal vendors, specifically ChainPatrol and Forcepoint ThreatSeeker, and appears on one blocklist. The domain was registered on 2026-05-31 via Dynadot LLC, a common registrar for suspicious domains. It resolves to IP 188.114.97.3 and uses Cloudflare nameservers (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com) with an SSL certificate from Google Trust Services / WE1.

The domain status is currently ACTIVE. Given the low trust score, limited but specific antivirus detections, and recent creation date, the risk level is assessed as moderate. Users and systems should block access to this domain until further analysis confirms its intent.