trznvip[.]org

The domain trznvip.org has been flagged for credential theft, a specific form of phishing attack aimed at stealing user credentials. This domain impersonates the Torzon Market, a brand known for providing onion links and security guides. The threat suggests that users may be tricked into entering sensitive information on what they believe to be a legitimate site.

Analysis indicates that trznvip.org has a VirusTotal score of 3/95, with three security vendors identifying it as malicious. The domain is registered through NameCheap, Inc., and resolves to the IP address 81.91.178.50. It was created on March 28, 2026, and is currently listed on one security blocklist. The site uses a Let's Encrypt SSL certificate and employs technologies such as PHP and DDoS-Guard. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trustworthiness.

The domain is currently offline, which has mitigated the immediate risk. However, the history of malicious activity and the high number of flags from security vendors suggest that it may pose a significant threat if it reappears. Users should avoid visiting the domain and should verify the authenticity of any links or communications related to the Torzon Market. Security teams should monitor for any attempts to reactivate this domain and consider blocking it to prevent potential credential theft.