horizoncapitaledge[.]com

On 3 September 2025 the domain horizoncapitaledge.com was registered through TuringSign Inc. d/b/a Cosmotown. The authoritative name servers are ns3.alexhost.md and ns4.alexhost.md, indicating hosting under the AlexHost provider. DNS resolution points to the IPv4 address 176.123.0.55. Threat intelligence sources have placed the domain on a single security blocklist and it is actively listed by the PhishDestroy sinkhole.

VirusTotal analysis shows that two of ninety‑one scanning engines currently flag the domain as malicious, confirming the presence of at least one known phishing indicator. The domain remains active as of the report date, 27 July 2026. The available data do not include a public page title, SSL certificate details, HTTP response codes, or any observed payload. Consequently, the exact phishing campaign vector, targeted brand, or credential‑harvesting technique cannot be confirmed at this time.

The limited detection footprint—two vendor detections and a single blocklist entry—suggests that the infrastructure may be newly deployed or operating under a low‑profile configuration, but the presence of a dedicated phishing blocklist entry and the registration date less than a year old points to a purposeful malicious deployment. Defenders should add horizoncapitaledge.com to outbound and inbound filtering rules, enforce domain‑based blocking in web proxies, and update DNS blocklists with the observed IP address 176.123.0.55. Continuous monitoring of the IP reputation and periodic rescans on VirusTotal are recommended to capture any escalation in detection counts. Organizations that receive unsolicited communications referencing "Horizon Capital Edge" or related financial terminology should treat any links to this domain as hostile and verify the authenticity of the request through out‑of‑band channels.