homebasenest[.]com[.]habithousecozy[.]com

The domain www.homebasenest.com.habithousecozy.com is currently active and classified as a generic_phishing site with a high risk rating. It was registered on February 25, 2026 through Dynadot Inc and resolves to the IPv4 address 194.36.191.196, which belongs to AS60117 Host Sailor Ltd located in the Netherlands. The authoritative nameservers are ns5.nl.hostsailor.com and ns6.nl.hostsailor.com. An HTTPS service is present, using a Let’s Encrypt certificate (YR1) and the web server responds with HTTP status 200. The page title reported by the crawler is "Home Base Nest"; no additional content analysis is available. The site employs common front‑end libraries such as Bootstrap, jQuery, Slick, OWL Carousel, and runs on LiteSpeed with HTTP/3 support. Security telemetry shows that one of ninety‑one VirusTotal scanners flagged the domain, and it appears on a single blocklist, with PhishDestroy already blocking it. Gridinsoft assigns a trust score of 0 out of 100. While the technical footprint confirms a deliberately hosted phishing infrastructure, the lack of public content analysis means the exact brand being impersonated cannot be verified beyond the generic classification. Defenders should continue to block the domain at network perimeters, monitor DNS queries for the listed nameservers, and update endpoint filters to include the observed IP address and SSL fingerprint. Ongoing observation is recommended to detect any changes in hosting, additional detection flags, or new payloads that may be deployed.