horwex[.]com

The domain horwex.com was registered on 21 February 2026 through Web Commerce Communications Limited and is hosted on Cloudflare’s network (ASN 13335) with the IP address 104.21.77.192 located in the United States. DNS resolution uses the Cloudflare authoritative nameservers clay.ns.cloudflare.com and leah.ns.cloudflare.com. An HTTP request returns status 200, but the site presents no TLS certificate, leaving traffic unencrypted. The page title returned by the server reads "Horwex: Crypto Casino Games & Casino Slot Games - Crypto Gambling", indicating that the operator is positioning the site as a cryptocurrency gambling service. The threat classification is listed as a "Crypto Gambling" scam and the underlying phishing kit is identified as the "Gambler Scam" package, which is commonly used to harvest credentials from users seeking crypto‑based casino platforms.

From a detection perspective, the domain appears on a single security blocklist and has been flagged by PhishDestroy. AlienVault OTX includes the domain in one threat‑intelligence pulse, providing additional corroboration of malicious intent. VirusTotal analysis shows that one out of ninety‑three scanning engines has raised a detection, confirming at least partial malicious behavior. The Gridinsoft trust score assigns a rating of 1/100, reflecting an extremely low reputation. No other public reputation services are cited.

Despite the available indicators, the exact content served to visitors has not been publicly disclosed, and no visual or functional analysis of the landing page is available. Consequently, the full scope of credential‑stealing or payment‑drain mechanisms cannot be confirmed at this time. Defenders should block or sinkhole the domain at the network perimeter, enforce DNS filtering against the listed nameservers, and monitor outbound connections to the Cloudflare IP range for anomalous activity.