trznmarket1[.]com

trznmarket1.com is an active infrastructure observed since its registration on 22 May 2026. The domain is delegated to Cloudflare nameservers audrey.ns.cloudflare.com and cris.ns.cloudflare.com and resolves to the Cloudflare IP 188.114.97.3 located in Canada. The site is served over HTTPS using a Google Trust Services certificate (WE1) and employs Cloudflare’s HTTP/3 stack. Registration information lists NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. The page title returned by the web server is “Torzon Market – Official Overview & Privacy Focus”, indicating a brand‑impersonation campaign targeting the Torzon Market name. The domain has been flagged by PhishDestroy and appears on at least one public blocklist; VirusTotal scans show three of ninety‑one scanners flagging it as malicious, and Gridinsoft assigns a trust score of 0/100. HTTP requests receive a 200 response, suggesting the malicious payload is currently live. While the exact content of the page has not been captured, the combination of brand‑impersonation labeling, low trust score, and detections confirms a high‑risk phishing operation. Defenders should add trznmarket1.com to blocklists, monitor DNS queries for the domain, and ensure that outbound filtering blocks connections to the associated Cloudflare IP. Email security gateways should be updated to detect references to “Torzon Market” and the domain, and user awareness training should highlight the risk of unsolicited communications referencing this brand. Continuous telemetry collection is recommended to track any changes in hosting or certificate usage.