# torzon-onion.cfd: Recorded Signal 01 Access Protocol Page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/torzon-onion.cfd/ Machine-readable companion: https://phishdestroy.io/domain/torzon-onion.cfd/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-06 17:19:36 UTC - Selected availability observation: 2026-11-06T17:19:36Z - Stored record updated: 2026-11-06 19:34:43 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): signal ## Stored infrastructure - Observed IP address: 45.147.197.100 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 (observed: 2026-11-06T17:19:36Z) - Registration date in stored WHOIS data: 2026-04-07 17:35:36 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1b1dd-2c7e-73cd-8783-6917f6a4a2ca/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/torzon-onion.cfd - Certificate Transparency search: https://crt.sh/?q=%25.torzon-onion.cfd - Web Archive lookup: https://web.archive.org/web/*/https://torzon-onion.cfd/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records that torzon-onion.cfd displays a Signal 01 Access Protocol page with a Torzon Market login screenshot and access guidance. On 2026-11-06, torzon-onion.cfd displayed a page headed "SIGNAL 01" with the subtitle "ACCESS PROTOCOL" beneath a Torzon Market logo and navigation links for Access, Overview, Marketplace, Wallets, Security and FAQ. The page embeds a screenshot of a browser window showing a Torzon Market login form with username, password and captcha fields, a Login button and a "Create an account" tab, overlaid with a torzon-onion.cfd watermark. Below the image, a heading reads "How to Access Torzon Darknet Market Safely in 2026". The stored VirusTotal domain result reports 0 detections out of 92 engines. Package revision: e6f75d1d5fd5a1bd02122d76aa301e957ffe1f3bd7aa49d15a253f76c2649146 Text generated (not scan time): 2026-11-06 18:57:17 Reviewed evidence snapshot: {"domain":"torzon-onion.cfd","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"torzon-onion.cfd","final_host":"torzon-onion.cfd","redirects":[],"captured_at":"2026-11-06T17:17:21.837000Z","uuid":"01a1b1dd-2c7e-73cd-8783-6917f6a4a2ca","report_url":"https://urlscan.io/result/01a1b1dd-2c7e-73cd-8783-6917f6a4a2ca/","sha256":"b635bbff906db8160d39fe97b9b1436d00cdbd4091974b60ebb8ad885466437c","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","initial_ai_description":"The site describes itself as a 'Darknet Market' and provides instructions for accessing it, including details about login, two-factor authentication, and mnemonic recovery codes, which are typical features of illicit marketplaces. The domain name 'torzon-onion.cfd' also strongly suggests an association with the dark web.","initial_ai_description_kind":"unverified previous AI opinion","virustotal":{"scope":"domain","detections":0,"engines":92,"malicious":0,"suspicious":0,"analysis_date":"2026-10-31","retrieved_date":"2026-11-06","vendor_labels":[],"flagging_vendors":[]},"virustotal_public_summary":"The stored VirusTotal domain result reports 0 detections out of 92 engines.","page_paragraph_target_characters":603} Source facts (timestamps as stored): {"record_id":1830427,"first_recorded_at":"2026-11-06 18:19:36","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":0,"denominator":92,"malicious":0,"suspicious":0,"vendors":null,"observed_at":"2026-10-31T05:20:24Z","checked_at":null,"fetched_at":"2026-11-06T17:53:58Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":0,"denominator":92,"malicious":null,"suspicious":null,"vendors":[],"observed_at":"2026-10-31 05:20:24","checked_at":"2026-11-06 18:54:00","fetched_at":"2026-11-06 17:54:00","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":[],"vendor_names":[],"stats":{"timeout":0,"harmless":56,"malicious":0,"suspicious":0,"undetected":36}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-06 18:54:29"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-06 20:34:43"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1830427,"scope":"checked_url","observed_at":"2026-11-06T17:19:36Z","http_status":200,"http_observed_at":"2026-11-06T17:19:36Z","stored_http_code":200,"stored_http_observed_at":"2026-11-06T17:19:36Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-06: https://screenshots.phishdestroy.io/us/01a1b1dd-2c7e-73cd-8783-6917f6a4a2ca.png Captured: 2026-11-06 17:17:21 UTC Source report: https://urlscan.io/result/01a1b1dd-2c7e-73cd-8783-6917f6a4a2ca/ SHA-256: b635bbff906db8160d39fe97b9b1436d00cdbd4091974b60ebb8ad885466437c - URLScan · 2026-11-05: https://screenshots.phishdestroy.io/us/01a1ab40-5044-749e-be47-3c46198db237.png Captured: 2026-11-05 10:28:09 UTC Source report: https://urlscan.io/result/01a1ab40-5044-749e-be47-3c46198db237/ SHA-256: b635bbff906db8160d39fe97b9b1436d00cdbd4091974b60ebb8ad885466437c - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5d09f371-71b7-4c5b-8ebf-8bc1b2fb0b11.png Captured: 2026-11-06 17:55:21 UTC Source report: https://radar.cloudflare.com/scan/5d09f371-71b7-4c5b-8ebf-8bc1b2fb0b11 SHA-256: dd41bdd60dbaa091bc9c9628949e77a74fe9413a06461918650b08954fb78e99 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-06T17:20:11Z", "uuid": "01a1b1dd-2c7e-73cd-8783-6917f6a4a2ca", "scanned_at": "2026-11-06T17:17:21Z", "final_url": "https://torzon-onion.cfd/", "status": 200, "ip": "45.147.197.100", "ptr": "s38.server-panel.net", "ips": [ "45.147.197.100" ], "asns": [ "204601" ], "countries": [ "NL" ], "link_domains": [ "torzon4kvfeber6t4a2lsnk7utfneyx6kvebum5xmzevstl3nco4l6yd.onion", "q46wfscjbjkssirh5ddefdjnhw6e7do6534metxxec54o6x5iipployd.onion", "fnc26znmwu3od77k4b3ihaum52g7xkultyukrgo55jxpbhmuteymxvqd.onion", "sglgj227562zft5e2xzgrcs7zq4n3k3wyv72gip63dcmuda42holw5ad.onion", "ujgkk4t2ismws2yzjxs22aaugilhi73ss5cbmo26dtkyojuplgtut2id.onion", "torzon-onions.click", "torzon-market.forum", "torzon.homes", "torzon.makeup", "torzon-main.xyz", "torzon-main.top", "torzon-darknet.shop", "torzon.bike", "torzon-onion.club" ], "doc_hash": "718f794b9b511b1adccd170f7b3fad7d43c507de5d177d86bb6e14a6c7e9b28a", "cookies": [ "__ddg9_", "__ddg1_", "PHPSESSID", "__ddg8_", "__ddg10_" ], "tls": { "san": [ "torzon-onion.cfd" ], "cipher": "AES_128_GCM", "issuer": "YR2", "subject": "torzon-onion.cfd", "protocol": "TLS 1.3", "valid_to": "2026-12-20T16:00:08Z", "valid_from": "2026-09-21T16:00:09Z" }, "domain_age_days": 212, "apex_age_days": 212, "tls_age_days": 46, "tls_valid_days": 89, "requests": 9, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-2aab354" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "ddos-guard", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.2.35", "content-security-policy": "upgrade-insecure-requests;" } }, "cf": { "v": 1, "fetched_at": "2026-11-06T17:56:21Z", "uuid": "5d09f371-71b7-4c5b-8ebf-8bc1b2fb0b11", "scanned_at": "2026-11-06T17:55:21Z", "final_url": "https://torzon-onion.cfd/", "status": 200, "history": [ { "url": "https://torzon-onion.cfd/", "status": 200 } ], "dom_hash": "b2e78e09ca94b149dd2fea408679c8370a4fbf386076db85b6ee126311a73e3a", "doc_hash": "718f794b9b511b1adccd170f7b3fad7d43c507de5d177d86bb6e14a6c7e9b28a", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "torzon-onion.cfd", "type": "A", "value": "45.147.197.100" } ], "dnssec_valid": false, "ip": "127.0.1.10", "whois": { "registrar": "Dynadot Inc", "created": "2026-04-07T19:35:36Z", "updated": "2026-04-12T19:37:09Z", "expires": "2027-04-07T23:59:59Z", "nameservers": [ "ns1.zomro.net", "ns2.zomro.ru", "ns3.zomro.com", "ns4.zomro.su" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-06T17:53:58Z", "analysis_at": "2026-10-31T05:20:24Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 0, "suspicious": 0, "undetected": 36 }, "reputation": 0, "created": "2026-04-07T00:00:00Z", "updated": "2026-04-07T00:00:00Z", "first_seen": "2026-04-08T19:29:56Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "ns3.zomro.com" }, { "ttl": 14400, "type": "MX", "value": "torzon-onion.cfd", "priority": 0 }, { "ttl": 21600, "type": "NS", "value": "ns4.zomro.su" }, { "ttl": 21600, "type": "SOA", "rname": "mon.zomro.org", "value": "ns1.zomro.net" }, { "ttl": 21600, "type": "NS", "value": "ns1.zomro.net" }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 +a +mx +ip4:45.147.197.100 ~all" }, { "ttl": 14400, "type": "A", "value": "45.147.197.100" }, { "ttl": 21600, "type": "NS", "value": "ns2.zomro.ru" } ], "dns_at": "2026-10-31T06:09:46Z", "jarm": "2ad2ad16d2ad2ad22c41d41d000000d740f47fc623495ea334f7291b19b353", "cert": { "san": [ "torzon-onion.cfd" ], "issuer": "Let's Encrypt / YR2", "serial": "5749128451a6a11af778f1b60fc9c77f23b", "sha256": "1f490af7bea72a96807d05e0fd61671c315c0ce35ecef3c438fab4594d2ea345", "subject": "torzon-onion.cfd", "valid_to": "2026-12-20T16:00:08Z", "valid_from": "2026-09-21T16:00:09Z" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-04-07T23:59:59Z", "last changed": "2026-04-08T09:53:57Z", "registration": "2026-04-07T19:35:36Z", "registrar expiration": "2027-04-07T23:59:59Z", "last update of RDAP database": "2026-04-09T07:19:42Z" }, "registrar": "Dynadot Inc", "registrar_iana_id": "472" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-06T17:51:31Z", "mail_config": { "mx": [ "torzon-onion.cfd" ], "spf": "v=spf1 +a +mx +ip4:45.147.197.100 ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 2 }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-11-06T17:21:33Z", "first": "2026-06-04T18:04:52Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.01, "avg_page_bytes": 6410 }, "social_tags": { "title": "Torzon Darknet Market - Market Link & 2026 Review", "robots": "index, follow", "keywords": "torzon darknet market, torzon market link, torzon marketplace, torzon onion, torzon official, torzon verified, torzon 2026", "description": "Torzon darknet market review 2026. Find the latest verified Torzon market link, official onion mirrors, login guide, wallet information and full marketplace details for Torzon marketplace.", "canonicalUrl": "https://torzon-onion.cfd" }, "trackers": { "requests": 8 }, "mixed_content": { "upgrade_insecure": true, "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 23, "tls": 76, "wait": 40, "connect": 36, "download": 1 }, "response_ms": 176 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 22, 25, 53, 80, 110, 143, 443, 587, 993, 995 ] }, "carbon": { "bytes": 18230, "co2_grams": 0.0007, "cleaner_than": 59 }, "dns_server": { "ns": [ { "ip": "185.82.216.129", "host": "ns2.zomro.ru" }, { "ip": "212.8.245.252", "host": "ns1.zomro.net" }, { "ip": "51.38.146.91", "host": "ns3.zomro.com" }, { "ip": "116.202.0.200", "host": "ns4.zomro.su" } ], "zone": "torzon-onion.cfd" }, "cookies": { "cookies": [ { "name": "__ddg10_" }, { "name": "__ddg9_" }, { "name": "__ddg1_", "http_only": true }, { "name": "PHPSESSID", "session": true }, { "name": "__ddg8_" } ] }, "location": { "ip": "45.147.197.100", "asn": "204601", "org": "Zomro B.V.", "city": "Meppel", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "torzon-onion.cfd" }, "dns": { "A": [ "45.147.197.100" ], "MX": [ "{\"exchange\": \"torzon-onion.cfd\", \"priority\": 0}" ], "NS": [ "ns2.zomro.ru", "ns1.zomro.net", "ns3.zomro.com", "ns4.zomro.su" ], "SOA": "{\"nsname\": \"ns1.zomro.net\", \"hostmaster\": \"mon.zomro.org\", \"serial\": 2026040805, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 +a +mx +ip4:45.147.197.100 ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": "upgrade-insecure-requests;", "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "DDoS-Guard WAF", "has_waf": true }, "get_ip": { "ip": "45.147.197.100", "family": 4 }, "redirects": { "chain": [ "https://torzon-onion.cfd" ] }, "linked_pages": { "external": [ "http://torzon4kvfeber6t4a2lsnk7utfneyx6kvebum5xmzevstl3nco4l6yd.onion/", "http://q46wfscjbjkssirh5ddefdjnhw6e7do6534metxxec54o6x5iipployd.onion/", "http://fnc26znmwu3od77k4b3ihaum52g7xkultyukrgo55jxpbhmuteymxvqd.onion/", "http://sglgj227562zft5e2xzgrcs7zq4n3k3wyv72gip63dcmuda42holw5ad.onion/", "http://ujgkk4t2ismws2yzjxs22aaugilhi73ss5cbmo26dtkyojuplgtut2id.onion/", "https://torzon-onions.click/", "https://torzon-market.forum/", "https://torzon.homes/", "https://torzon.makeup/", "https://torzon-main.xyz/", "https://torzon-main.top/", "https://torzon-darknet.shop/", "https://torzon.bike/", "https://torzon-onion.club/" ], "external_count": 14, "internal_count": 8 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-04-07T19:35:36Z", "updated": "2026-04-12T19:37:09Z", "expires": "2027-04-07T23:59:59Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.zomro.net", "ns2.zomro.ru", "ns3.zomro.com", "ns4.zomro.su" ] }, "headers": { "headers": { "server": "ddos-guard", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.2.35", "content-security-policy": "upgrade-insecure-requests;" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a1b1dd-2c7e-73cd-8783-6917f6a4a2ca.png","source":"URLScan","report_url":"https://urlscan.io/result/01a1b1dd-2c7e-73cd-8783-6917f6a4a2ca/","captured_at":"2026-11-06T17:17:21Z","sha256":"b635bbff906db8160d39fe97b9b1436d00cdbd4091974b60ebb8ad885466437c","model_image_sha256":"b1d10352d86aa1d7e2c9680d223b0812095e582d0d2e8ae6082d9c38e6a51906","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/torzon-onion.cfd/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/torzon-onion.cfd/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/torzon-onion.cfd/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/torzon-onion.cfd/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/torzon-onion.cfd/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/torzon-onion.cfd/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/torzon-onion.cfd/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/torzon-onion.cfd/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1830427, "scope": "checked_url", "observed_at": "2026-11-06T17:19:36Z", "http_status": 200, "http_observed_at": "2026-11-06T17:19:36Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-06T17:19:36Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```