horizonsmartgroupint[.]com

The domain horizonsmartgroupint.com has been identified as a generic phishing domain and is currently offline. The domain impersonates Horizon Smart Group Bank, a financial institution, to deceive users and potentially steal sensitive information.

Infrastructure analysis reveals that horizonsmartgroupint.com was registered through TuringSign Inc. d/b/a Cosmotown on May 11, 2026. The domain resolves to the IP address 198.251.84.200, which is located in Luxembourg (LU) and is associated with FranTech Solutions. This domain is flagged by 16 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. Additionally, the domain appears on one security blocklist and has been blocked by PhishDestroy. The SSL certificate for the domain is issued by Let's Encrypt / R13, which is a common certificate authority for both legitimate and malicious websites.

The current status of horizonsmartgroupint.com is offline. However, the domain's prior online presence and its association with a reputable financial institution pose an elevated risk. Organizations and individuals are advised to update their security policies to block this domain and to monitor for any related DNS or IP activity. Security teams should also conduct awareness training to educate users on the signs of phishing attacks and the importance of verifying URLs and SSL certificates before entering sensitive information.