homersimpsons[.]xyz

The domain homersimpsons.xyz was registered on 21 Feb 2026 through Dynadot LLC and is currently active. DNS resolves to 172.67.222.151, an address owned by Cloudflare (AS13335) and served over HTTPS with a Google Trust Services certificate. The site is delivered via Cloudflare’s edge network, uses HTTP/3, and is hosted on the nameservers ricardo.ns.cloudflare.com and wally.ns.cloudflare.com. The page returns HTTP 200 and the title “homersimpsons.xyz | 523: Origin is unreachable”, indicating that the origin server is not directly reachable, a pattern commonly observed in phishing infrastructure that relies on Cloudflare to mask the backend. The domain appears on two public blocklists and has been flagged by PhishDestroy and ScamSniffer. Independent scanning on VirusTotal recorded detections from two security vendors out of ninety‑three, and the Gridinsoft trust score is 0 / 100, reinforcing the malicious assessment. Risk rating is high and the threat type is classified as generic phishing. Defenders should add the domain and its resolving IP to blocklists, enforce outbound filtering for any traffic to the address, and monitor for related sub‑domains that may be provisioned under the same Cloudflare account. Ongoing observation of DNS changes and re‑scans with additional sandboxes are advised to capture any evolution of the payload or landing page content.