horizon-xrpl[.]com

Analysis of horizon-xrpl.com shows a recently registered domain (created 17 July 2025) that is being used for brand impersonation of Bitget. The site presented the page title “CONTRACT PORTAL”, which aligns with the reported crypto‑scam classification. Infrastructure details indicate the domain resolves to the IPv6 address 2a02:4780:84:dcf2:a260:fd71:a8fc:d79f, hosted by Hostinger International Limited under ASN 47583 in Japan. Registration records list HOSTINGER operations, UAB as the registrar.

The SSL certificate is identified as R10, suggesting a low‑trust certificate. The domain appears on four security blocklists and has been actively blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. Among 93 scanning engines on VirusTotal, a single vendor generated a detection, reinforcing the malicious assessment. Gridinsoft assigned a trust score of 0 out of 100, indicating no confidence in the site’s legitimacy.

Current HTTP response is offline, which may be a temporary takedown or a deliberate removal after detection. Defenders should continue to block the domain at perimeter filters, update threat intelligence feeds with the IPv6 address and registrar information, and monitor for any re‑hosting attempts. Because the domain’s content has not been publicly examined, further investigation of the “CONTRACT PORTAL” page is advised if the site resurfaces. The combination of brand impersonation, low‑trust SSL, blocklist inclusion, and a zero trust score warrants an elevated risk rating and proactive mitigation.