horizoncapitaltrade[.]com

Analysis of horizoncapitaltrade.com shows the domain is actively used for phishing. The domain was registered on 18 October 2021 through Namecheap Inc and is hosted on IP 66.29.156.99, which resolves via the authoritative nameservers ns1.tygerhosting.com and ns2.tygerhosting.com. VirusTotal scans have flagged the domain in 2 of 91 security vendor engines, indicating that at least a minority of scanners have identified malicious behavior. The domain is listed on a single external blocklist and has been specifically blocked by PhishDestroy, confirming its inclusion in threat intelligence feeds.

No additional public indicators such as Google Safe Browsing entries, Open Threat Exchange references, SSL certificate details, HTTP response codes, or page title information are currently available in the intelligence set. Consequently, the exact phishing campaign payload, targeted brand, or landing page content cannot be described at this time. The available evidence is sufficient to classify the domain as a high‑risk phishing resource. Defenders should add horizoncapitaltrade.com to network‑level deny lists, update endpoint and DNS filtering policies to block resolution to 66.29.156.99, and monitor Namecheap‑registered domains for similar patterns.

Continuous re‑inspection of the IP address and periodic rescans with VirusTotal or other multi‑engine platforms are recommended to detect any escalation in detection counts. Organizations should also verify that email security gateways are configured to quarantine messages containing URLs to this domain. The lack of further public metadata does not diminish the threat; the current indicators already demonstrate active malicious use.