horkas[.]com

Analysis of the domain horkas.com indicates it was actively involved in a cryptocurrency-based gambling scam, classified under the Gambler Scam phishing kit. The domain was registered on July 19, 2025, through NameSilo, LLC, and resolved to the IP address 69.5.189.55, hosted on AS42624 (Global-Data System IT Corporation) located in Switzerland. The page title, 'HORKAS | Play at the best online casino based on Blockchain,' explicitly positions the site as a blockchain gambling platform, aligning with the reported scam type of a crypto scam. No SSL certificate was detected, increasing the risk of unencrypted data transmission.

Infrastructure analysis reveals the domain used nameservers ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserver, which may be associated with other malicious campaigns, though further correlation is required. The domain appears on one security blocklist, specifically PhishDestroy, and was flagged by 2 of 95 security vendors on VirusTotal. Gridinsoft assigned a trust score of 1 out of 100, further corroborating its malicious classification. As of the report date, the domain has been taken offline, though residual risks may persist if the infrastructure is reused.

Defenders should treat this domain as part of a broader crypto-gambling phishing operation. Monitoring for re-registration or IP reuse under new domains is recommended. Organizations should update blocklists to include horkas.com and its associated IP, and consider flagging related nameserver infrastructure for further scrutiny. The exact content and functionality of the site remain unanalyzed, but the available evidence confirms its role in fraudulent activity targeting cryptocurrency users.