thetorzonmarket[.]net

The domain thetorzonmarket.net was registered on May 15 2026 through Internet Domain Service BS Corp. It resolves to 104.21.49.185, a Cloudflare‑owned address located in Canada. The authoritative nameservers are barbara.ns.cloudflare.com and chip.ns.cloudflare.com. The site returns HTTP 200 and presents the page title “TorZon Market Link — Official Onion URL & Mirrors 2026”. The SSL certificate is issued by Google Trust Services under the WE1 profile, indicating a valid TLS handshake. The domain appears on one security blocklist and is listed in a single AlienVault OTX pulse. It is currently blocked by PhishDestroy and received a Gridinsoft trust score of 0/100. No malware detections are reported by the 92 VirusTotal scanners, but the absence of detections does not confirm safety. The classification in the input is generic_phishing, and the presence on a phishing‑specific blocklist together with the low trust score suggests the site is being used to lure victims, likely toward illicit cryptocurrency market resources referenced in the title. Evidence beyond the listed infrastructure is not publicly available; content analysis has not been performed. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any outbound connections to the IP, and consider adding the domain to internal blocklists. Incident response teams should treat any credential or payment data submitted to the site as compromised and advise users to change affected accounts. Ongoing observation of threat‑intel feeds for additional indicators is recommended.