capitalhorizon[.]click

The domain capitalhorizon.click was identified as a brand impersonation threat targeting Google. The site posed as 'Capital Horizon – Safe investment with Capital Horizon', a fraudulent investment platform designed to deceive users into providing sensitive information or funds. No specific drainer kit was identified, but the intent was clearly financial fraud.

Technical indicators reveal a significant risk profile. VirusTotal flagged the domain with a score of 4/95, indicating multiple security vendors detected malicious activity. The domain was registered through Global Domain Group LLC and resolved to IP address 163.61.188.2. It was created on March 12, 2025, and appeared on one security blocklist. The SSL certificate was issued by Let's Encrypt (R12), which is common for legitimate sites but also abused by phishers. Google Safe Browsing status was not explicitly provided, but the blocklist presence suggests active threats.

The domain is currently offline, indicating that takedown actions were successful. However, the remaining risk is that similar domains may be created. Users should remain vigilant and verify any unexpected investment offers, especially those mimicking Google or other trusted brands. PhishDestroy recommends checking URLs thoroughly and avoiding any unsolicited financial opportunities. If you encounter such sites, report them immediately to help protect others.