horizoncapitalgroup[.]org

This domain, horizoncapitalgroup.org, is actively engaged in a cryptocurrency investment scam, presenting itself as a legitimate financial firm under the name HorizonCapitalGroup. Analysis indicates the site employs deceptive tactics to lure victims into disclosing sensitive financial information or transferring cryptocurrency assets under false pretenses. The page title, 'HorizonCapitalGroup - Crypto Investment Company,' explicitly targets individuals seeking investment opportunities, a common vector for fraudulent schemes in the financial sector. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain is registered through OwnRegistrar, Inc., and resolves to the IP address 162.244.93.4. It is flagged by 15 out of 95 security vendors on VirusTotal, appears on one security blocklist, and is documented in four threat intelligence pulses on a major threat-sharing platform. Additionally, the domain employs a Let's Encrypt SSL certificate, a tactic frequently observed in phishing campaigns to create a false sense of legitimacy. Technologies detected on the site include PHP, Bootstrap, LiteSpeed, Select2, jQuery, and HTTP/3, which are consistent with modern web applications but do not mitigate the underlying fraudulent intent. Users who have visited horizoncapitalgroup.org or interacted with its content should take immediate remedial actions. Any credentials, financial details, or cryptocurrency wallet information shared with the site must be considered compromised. Affected individuals should revoke access to linked accounts, monitor for unauthorized transactions, and report the incident to relevant financial institutions or cybersecurity response teams. Additionally, the domain should be blocked at the network level to prevent further exposure, and users are advised to verify the legitimacy of any financial service through independent, trusted sources before engaging.