torzon-link[.]store

torzon-link.store is currently active and classified as a high‑risk generic phishing site employing brand impersonation tactics. The site was registered on May 22 2026 through NameCheap and resolves to the Cloudflare‑protected address 172.67.174.42. DNS resolution uses the Cloudflare name servers bethany.ns.cloudflare.com and junade.ns.cloudflare.com, and the HTTPS service presents a Google Trust Services certificate issued by WE1. HTTP requests return status 200 and the server advertises Cloudflare Browser Insights and HTTP/3, indicating standard Cloudflare edge infrastructure. The page title “Torzon Market — Official Links Directory & Trust Hub” suggests the site is positioned as a trusted link aggregator, a common lure for credential‑stealing campaigns. Five of ninety‑one VirusTotal scanners flagged the domain, and it is listed on a public blocklist (PhishDestroy). Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. No additional technical artifacts such as payloads, redirects, or form fields have been observed, so the exact phishing workflow remains unknown. Defenders should block both the domain and its resolving IP, add the associated Cloudflare name servers to watch lists, and monitor for any traffic to the site. Inclusion of the domain, IP address, and certificate fingerprint in intrusion‑detection signatures is recommended. Continuous re‑scanning is advised to capture any evolution of the site’s content or infrastructure.