horizonnetworks[.]nz

Analysis indicates that horizonnetworks.nz operates as a credential harvesting phishing site, designed to mimic legitimate login portals and capture user authentication details. The domain presents itself as a trusted service interface, luring victims into submitting sensitive information such as usernames, passwords, and potentially multi-factor authentication codes. This type of threat is particularly dangerous due to its ability to compromise accounts across multiple platforms if users reuse credentials. Infrastructure analysis reveals the domain resolves to the IP address 172.67.69.10, with only 1 out of 95 security vendors on VirusTotal currently flagging it as malicious. The domain is registered under the .nz top-level domain and remains active at the time of this report. The SSL certificate is issued by Google Trust Services, which may contribute to the site appearing legitimate to unsuspecting users. No additional blocklist entries or historical abuse reports were identified beyond the single VirusTotal detection. Users who have visited horizonnetworks.nz or entered credentials on the site should immediately change passwords for any accounts that may have been exposed. Enable multi-factor authentication where available, and monitor accounts for unauthorized activity. Network administrators should block the domain and its resolving IP address (172.67.69.10) at the perimeter. If corporate credentials were exposed, initiate incident response procedures including password resets and security awareness notifications for affected personnel. The domain should be treated as high-risk until further analysis confirms its takedown or remediation.