horizonchltd[.]com

Analysis indicates that horizonchltd.com was registered on 21 February 2026 and currently resolves to the IPv4 address 213.165.249.109, which belongs to InMotion Hosting, Inc. under ASN 22611 and is geolocated in the Netherlands. The site presented the page title “Home – Horizonchase” before being taken offline. Reputation services have flagged the domain: it appears on a single security blocklist and is listed as blocked by PhishDestroy. On VirusTotal the domain received detections from ten out of ninety‑five scanned vendors, demonstrating moderate malicious consensus. The Gridinsoft trust score of 35 / 100 further reflects a low confidence rating.

The TLS certificate is identified as “R11”, indicating an untrusted or self‑signed certificate, which is typical for malicious infrastructure. The combination of a recent registration date, hosting on a shared provider, low trust score, and multiple vendor detections aligns with known patterns of generic phishing operations. Uncertainty remains regarding the exact phishing campaign details, such as targeted brand or credential‑capture mechanism, because the only visible artifact is the page title and no additional content has been captured. No public Safe Browsing or OTX entries were provided, and the limited blocklist presence suggests the domain may have been newly deployed before broader community exposure.

Defenders should add horizonchltd.com to internal blocklists and ensure outbound connections to 213.165.249.109 are denied. Monitoring of InMotion Hosting IP ranges for similar new domains is advisable, as is periodic re‑scanning of the domain if it reappears. Updating web filtering and email security policies to recognize the page title “Home – Horizonchase” can help catch residual references. Given the observed vendor detections and low trust metrics, the domain should be treated as high‑confidence phishing and remediated accordingly.