torzon4kv5swfazrziqvel2imnxcckc4otcvopiv5lnxzpqu4v4m5iyd[.]top

The domain torzon4kv5swfazrziqvel2imnxcckc4otcvopiv5lnxzpqu4v4m5iyd.top, which hosts a page titled 'TorZon Access Queue,' has been identified as a generic phishing threat with an elevated risk level. This particular phishing site is designed as a crypto drainer, likely attempting to trick users into connecting their cryptocurrency wallets under the guise of accessing a service or queue, thereby stealing their funds. The site is now offline, but its impact could have been significant given its targeted nature.

VirusTotal flags this domain with 4 out of 95 security vendors recognizing it as malicious. It appears in one threat intelligence pulse on AlienVault OTX and is listed on one security blocklist. The domain was registered through 耐思尼克国际集团有限公司 (Nicesonic International Group Co., Ltd.) and was created on May 20, 2026. It resolves to IP address 172.67.207.158 and uses an SSL certificate issued by Google Trust Services (WE1). These technical indicators confirm the domain's malicious intent and its association with phishing campaigns.

To protect against crypto drainer threats like this, users should never connect their cryptocurrency wallets to unknown or unsolicited websites, especially those that claim to be access queues for popular services like TorZon. Always verify URLs carefully, use browser extensions that block known phishing domains, and enable two-factor authentication on all crypto accounts. If you have already interacted with this domain, immediately transfer any remaining assets to a new wallet and scan your device for malware. Reporting the domain to cybersecurity authorities can also help prevent future attacks.