torzon-market-link[.]sbs

The domain torzon-market-link.sbs is currently classified as a high‑risk generic_phishing site. It was registered on February 3 2026 through Dynadot LLC and hosts a web page titled “Torzon Market Link - Mirror Validator 2026”. The site serves content over HTTPS using a Let’s Encrypt R12 certificate, and the HTTP response code is 200. Infrastructure analysis shows the domain resolves to the IPv4 address 45.147.197.100, which is assigned to a network operated by Podaon SIA in the Netherlands. The same IP appears on a single security blocklist and is flagged by PhishDestroy. VirusTotal reports a single positive detection out of 95 scanning engines, while Gridinsoft assigns a trust score of 0 out of 100, indicating a strong malicious reputation. Threat intelligence sources confirm limited exposure: the domain is referenced in one AlienVault OTX pulse and has been listed on one public blocklist. No additional aliases or related domains have been publicly correlated, and the short age of the domain (less than six months) limits the historical context. The presence of a valid SSL certificate does not mitigate the risk, as Let’s Encrypt certificates are freely obtainable by malicious operators. Defenders should block network traffic to 45.147.197.100 and add torzon-market-link.sbs to domain allow‑lists for web filtering solutions. Email security gateways ought to flag messages containing URLs to this domain or similar patterns. Continuous monitoring of the IP and associated hostnames is advised, as the infrastructure could be repurposed for further phishing campaigns.